zig-build-system
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill enables the agent to process and modify project configuration files like
build.zigandbuild.zig.zon, which constitutes an ingestion surface for potentially untrusted project data. 1. Ingestion points:build.zig,build.zig.zon(referenced inSKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: The build system usesaddSystemCommandandaddRunArtifactto execute tools and binaries (referenced inreferences/build-steps.md). 4. Sanitization: Absent. This surface is inherent to the skill's primary purpose of project build management. - [EXTERNAL_DOWNLOADS]: The skill documents fetching dependencies from GitHub, a well-known service for hosting source code. Evidence: URLs for the
zapandzig-networklibraries found inSKILL.mdandreferences/modules-dependencies.md. - [COMMAND_EXECUTION]: The skill instructs on the use of
addSystemCommandto run external tools andaddRunArtifactto execute project-generated binaries. These capabilities are standard for build system scripts and are documented for legitimate use cases.
Audit Metadata