night-market-build-and-env
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloads for development tools from official and well-known sources, including the
uvinstaller fromastral.sh/uv, the GitHub CLI fromcli.github.com, and the project source code from the author's repository atgithub.com/athola/claude-night-market.git. - [COMMAND_EXECUTION]: The skill utilizes standard build and environment management commands to prepare the workspace, such as
make,uv run,npm install, andcargo install. These are used for intended development tasks like validating plugin structures and running test suites. - [PERSISTENCE]: The instructions include running
uv run pre-commit install, which sets up git hooks in the.git/hooks/directory. This is a standard persistence mechanism used in development workflows to ensure code quality checks run before commits. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where diagnostic tools (
make validate-all,pytest) ingest and process data from the local repository. Ingestion points: Plugin source files in theplugins/directory. Boundary markers: None explicitly mentioned in the setup guide. Capability inventory: Shell command execution viamakeand Python script execution viauv runandpytest. Sanitization: None; the tools are designed to operate on trusted source code from the author's own repository.
Audit Metadata