bazel-build-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes
WORKSPACEconfiguration templates that fetch Bazel rules for JavaScript and Python from theaspect-buildandbazelbuildGitHub organizations. These are recognized, well-known sources for Bazel development tools. - [COMMAND_EXECUTION]: Provides templates for defining custom Bazel rules using
ctx.actions.run. This is a core mechanism in Bazel for executing build actions like compiling code or building Docker images. It also provides shell command examples for dependency analysis usingbazel queryand standard Unix tools likesedandwc. - [INDIRECT_PROMPT_INJECTION]: The skill templates configure the build system to ingest local project files which could influence build behavior. This represents an inherent configuration surface for build tools.
- Ingestion points: Processes local configuration via
try-import %workspace%/user.bazelrcand dependency specifications inpnpm-lock.yamlthroughnpm_translate_lock. - Boundary markers: Relies on standard Bazel configuration parsing and Starlark interpretation boundaries.
- Capability inventory: Templates include the ability to execute subprocesses via
ctx.actions.runand standardbazelCLI operations. - Sanitization: Build actions are governed by the Bazel sandbox and rule definitions which typically sanitize environment variables and inputs.
Audit Metadata