makefile-generation
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides templates and instructions for standard build automation tasks such as linting, testing, and formatting within Python, Rust, and TypeScript ecosystems.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a vulnerability surface where project metadata is ingested to render Makefiles.
- Ingestion points: The skill reads
pyproject.toml,Cargo.toml, andpackage.jsonfiles to detect the project language and potential metadata. - Boundary markers: Absent; there are no explicit delimiters or warnings to ignore instructions embedded within the processed project files.
- Capability inventory: The skill utilizes
Read,Write, andBashtools to detect environment state and generate the output file. - Sanitization: Absent; the provided snippets do not demonstrate input validation or escaping for the metadata used in template rendering.
Audit Metadata