night-market-build-and-env

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references downloads for development tools from official and well-known sources, including the uv installer from astral.sh/uv, the GitHub CLI from cli.github.com, and the project source code from the author's repository at github.com/athola/claude-night-market.git.
  • [COMMAND_EXECUTION]: The skill utilizes standard build and environment management commands to prepare the workspace, such as make, uv run, npm install, and cargo install. These are used for intended development tasks like validating plugin structures and running test suites.
  • [PERSISTENCE]: The instructions include running uv run pre-commit install, which sets up git hooks in the .git/hooks/ directory. This is a standard persistence mechanism used in development workflows to ensure code quality checks run before commits.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where diagnostic tools (make validate-all, pytest) ingest and process data from the local repository. Ingestion points: Plugin source files in the plugins/ directory. Boundary markers: None explicitly mentioned in the setup guide. Capability inventory: Shell command execution via make and Python script execution via uv run and pytest. Sanitization: None; the tools are designed to operate on trusted source code from the author's own repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:09 PM