eliteforge-makefile-spec

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical utility for generating standardized Makefiles. It provides structured guidance for the agent to map various package managers and build systems to a unified interface.
  • [COMMAND_EXECUTION]: The skill includes a bundled Python script, scripts/inspect_repository.py, used to scan the target repository. This script uses subprocess.run specifically to call git rev-parse for root directory resolution. The command uses a list of arguments and does not use a shell, preventing shell injection vulnerabilities.
  • [DATA_EXFILTRATION]: No network activity or access to sensitive system directories (e.g., .ssh, .aws) was detected. The skill explicitly instructs the agent to avoid exposing credentials or secrets in commands or help documentation.
  • [PROMPT_INJECTION]: The instructions are strictly limited to technical specifications and do not contain any attempts to bypass safety filters or override system-level instructions.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform any external downloads or execute code from remote sources. All logic is contained within the local skill package.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 08:46 AM
Security Audit — agent-trust-hub — eliteforge-makefile-spec