vault-init
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
mkdir,rsync, andcpto create a directory and copy template files. It includes safeguards such as--ignore-existingand-nflags to prevent accidental data loss or overwriting of user files. - [INDIRECT_PROMPT_INJECTION]: The skill supports a local 'overlay' mechanism that reads additional instructions and configurations from a path defined by the
$POWERSUIT_OVERLAYenvironment variable. This represents a potential surface where local files can influence agent behavior, though it is scoped to the local filesystem. - [COMMAND_EXECUTION]: Shell commands are used to verify the existence of the configuration overlay directory before attempting to read its content.
Audit Metadata