makefile-generation

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No security issues detected. The skill provides templates and instructions for standard build automation tasks such as linting, testing, and formatting within Python, Rust, and TypeScript ecosystems.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a vulnerability surface where project metadata is ingested to render Makefiles.
  • Ingestion points: The skill reads pyproject.toml, Cargo.toml, and package.json files to detect the project language and potential metadata.
  • Boundary markers: Absent; there are no explicit delimiters or warnings to ignore instructions embedded within the processed project files.
  • Capability inventory: The skill utilizes Read, Write, and Bash tools to detect environment state and generate the output file.
  • Sanitization: Absent; the provided snippets do not demonstrate input validation or escaping for the metadata used in template rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:49 PM