init-agent-config
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common shell commands such as
tree,find,grep,cat, andjqto analyze repository structure and extract metadata from configuration files. It also uses thelncommand to create symbolic links betweenAGENTS.mdand agent-specific files likeCLAUDE.mdto ensure instruction consistency. These operations are appropriate for the skill's stated purpose of repository auditing and configuration. - [PROMPT_INJECTION]: The skill processes existing instruction files, such as
.cursorrules,CLAUDE.md, and.windsurfrules, which are considered untrusted external data. This creates an indirect prompt injection surface where malicious instructions within those files could potentially influence the agent's migration logic. However, the skill incorporates a multi-wave discovery and audit workflow that reduces the risk of unintended behavior by ensuring architectural grounding before any file modification occurs.
Audit Metadata