zig-build-system

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill enables the agent to process and modify project configuration files like build.zig and build.zig.zon, which constitutes an ingestion surface for potentially untrusted project data. 1. Ingestion points: build.zig, build.zig.zon (referenced in SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: The build system uses addSystemCommand and addRunArtifact to execute tools and binaries (referenced in references/build-steps.md). 4. Sanitization: Absent. This surface is inherent to the skill's primary purpose of project build management.
  • [EXTERNAL_DOWNLOADS]: The skill documents fetching dependencies from GitHub, a well-known service for hosting source code. Evidence: URLs for the zap and zig-network libraries found in SKILL.md and references/modules-dependencies.md.
  • [COMMAND_EXECUTION]: The skill instructs on the use of addSystemCommand to run external tools and addRunArtifact to execute project-generated binaries. These capabilities are standard for build system scripts and are documented for legitimate use cases.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 10:47 AM