electrobun-build
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs users to use
sudo apt-get installto install necessary system libraries on Linux. This is standard procedure for setting up a development environment and is appropriate for the skill's primary purpose.- [OBFUSCATION]: A GitHub Actions workflow snippet demonstrates the use ofbase64 --decodeto process a binary certificate from an environment variable. This is a common and legitimate practice in CI/CD pipelines for handling certificates and does not attempt to hide malicious code execution.- [INDIRECT_PROMPT_INJECTION]: The skill describes a build system that interacts with project source code and configuration files. While this represents a technical attack surface where untrusted project data could theoretically influence build behavior via build hooks, the skill's instructions themselves do not contain exploitable logic or unsafe data interpolation.
Audit Metadata