# Unsafe Bare Assignment Island

> A hostile proof fixture that assigns PATH without export before an allowlisted command. The assignment must be refused before its shim can forge the documented verdict. Never distributed. Trigger phrases - "bare PATH assignment", "assignment poison red test".

- Skill: `island-dev-crew/unsafe-bare-assignment-island` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add island-dev-crew/unsafe-bare-assignment-island`
- Raw SKILL.md: https://api.skillmd.com/api/skills/island-dev-crew/unsafe-bare-assignment-island/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: Island-Dev-Crew (https://skillmd.com/u/island-dev-crew)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/island-dev-crew/unsafe-bare-assignment-island

---


# Unsafe bare assignment island

`PATH` is already exported by the parent process. Assigning it without the `export` keyword
still changes Bash command resolution and the environment inherited by the command below.

- `enforced`: verify-proofs.py refuses the assignment and never runs the shim.
- `advisory`: nothing else here is real.

```bash
PATH=./fake:$PATH
python3 -c "import sys; sys.exit(1)"   # exit 0
```