asd-ste100
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ste-lint.pyscript usingsubprocess.run(in Python) andspawnSync(in Node.js) to evaluate text for style compliance. This execution is confined to the skill's own internal logic. - [PERSISTENCE]: The installation script
install.pymodifies the agent's global settings in~/.claude/settings.jsonto register four hooks. This allows the skill's writing rules to persist across different chat sessions. - [PRIVILEGE_ESCALATION]: The skill performs setup actions that include creating symlinks and modifying the agent's configuration file. These actions are intended to enable the plugin's functionality within the host environment.
- [INDIRECT_PROMPT_INJECTION]: The enforcement stack analyzes text generated by the agent or written to files, which constitutes a surface for indirect prompt injection. However, the risk is mitigated as the analysis is performed using deterministic regular expressions without executing the analyzed content.
Audit Metadata