setup-skill-hook
Warn
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill installs a
post-commithook into the.git/hooks/directory. This mechanism establishes persistence by ensuring specific code runs automatically every time a commit is generated in the repository. - [PRIVILEGE_ESCALATION]: The instructions recommend using
sudo apt-get install jqfor Linux users to install dependencies, which involves executing commands with administrative privileges. - [COMMAND_EXECUTION]: The skill performs shell-based operations, including executing the
setup-skill-hook.shscript and usingchmod +xto modify file permissions for the newly created Git hook.
Audit Metadata