eliteforge-makefile-spec
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical utility for generating standardized Makefiles. It provides structured guidance for the agent to map various package managers and build systems to a unified interface.
- [COMMAND_EXECUTION]: The skill includes a bundled Python script,
scripts/inspect_repository.py, used to scan the target repository. This script usessubprocess.runspecifically to callgit rev-parsefor root directory resolution. The command uses a list of arguments and does not use a shell, preventing shell injection vulnerabilities. - [DATA_EXFILTRATION]: No network activity or access to sensitive system directories (e.g.,
.ssh,.aws) was detected. The skill explicitly instructs the agent to avoid exposing credentials or secrets in commands or help documentation. - [PROMPT_INJECTION]: The instructions are strictly limited to technical specifications and do not contain any attempts to bypass safety filters or override system-level instructions.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any external downloads or execute code from remote sources. All logic is contained within the local skill package.
Audit Metadata