change-keybinding

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to perform file system operations, including reading, creating, and overwriting application configuration files (keybindings.yaml) and their parent directories.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external configuration files, which presents a surface for indirect prompt injection.
  • Ingestion points: The user's keybindings file at {{keybindings_file_path}}.
  • Boundary markers: Absent.
  • Capability inventory: The skill specifies workflows for reading and writing local files.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 09:08 AM
Security Audit — agent-trust-hub — change-keybinding