wizard
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and prepares bash scripts that utilize system utilities and the GitHub CLI (gh) for project configuration. The scripts use standard shell commands like tput, mktemp, and grep to provide a consistent user experience and manage local environment variables.- [EXTERNAL_DOWNLOADS]: The generated wizards include logic to open external service URLs (such as Stripe's dashboard) in the user's local browser using cross-platform tools like xdg-open, wslview, or open to facilitate manual configuration steps.- [PROMPT_INJECTION]: The skill analyzes local repository configuration and documentation files to identify the environment variables and secrets required for setup.
- Ingestion points: Processes .env, README, and GitHub workflow files within the user's project directory.
- Boundary markers: No explicit delimiters are specified for the context provided by these files.
- Capability inventory: The skill facilitates local file system writes, shell command execution via generated scripts, and GitHub Actions secret management.
- Sanitization: Extracted variable names are used in script generation without specific sanitization logic.
Audit Metadata