prelude-just
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Justfile content and natural language requests to generate shell commands.
- Ingestion points: The agent reads existing Justfile recipes and user-defined specifications to author or edit tasks, as described in
SKILL.md. - Capability inventory: The skill guides the execution of shell commands via
justand thexutility, specifically for testing and verifying new recipes. - Boundary markers: Instructions explicitly tell the agent to treat requests as specifications rather than direct shell text to interpolate, which helps mitigate injection risks.
- Sanitization: The skill mandates safer practices, such as using quoted shell expansion ("$value") for multiword or untrusted values and warns against raw text interpolation.
- [REMOTE_CODE_EXECUTION]: The skill references a command that executes content from a remote repository via Nix.
- Evidence:
nix run github:darkmatter/prelude#skill -- guide command-conventionsis mentioned in the references section ofSKILL.md. - Context: This reference points to the official repository of the skill's author/vendor (darkmatter) for additional documentation.
- [COMMAND_EXECUTION]: The skill involves creating and verifying shell-based recipes, which is its primary purpose.
- Evidence: The skill provides instructions for using
just --dry-runandxto verify command outputs and warns about the evaluation of backticks during Justfile loading. - Context: These instructions are defensive in nature, providing the agent with tools to safely inspect commands before execution.
Audit Metadata