electrobun-build

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFE
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs users to use sudo apt-get install to install necessary system libraries on Linux. This is standard procedure for setting up a development environment and is appropriate for the skill's primary purpose.- [OBFUSCATION]: A GitHub Actions workflow snippet demonstrates the use of base64 --decode to process a binary certificate from an environment variable. This is a common and legitimate practice in CI/CD pipelines for handling certificates and does not attempt to hide malicious code execution.- [INDIRECT_PROMPT_INJECTION]: The skill describes a build system that interacts with project source code and configuration files. While this represents a technical attack surface where untrusted project data could theoretically influence build behavior via build hooks, the skill's instructions themselves do not contain exploitable logic or unsafe data interpolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 11:51 PM