bazel-build-optimization

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes WORKSPACE configuration templates that fetch Bazel rules for JavaScript and Python from the aspect-build and bazelbuild GitHub organizations. These are recognized, well-known sources for Bazel development tools.
  • [COMMAND_EXECUTION]: Provides templates for defining custom Bazel rules using ctx.actions.run. This is a core mechanism in Bazel for executing build actions like compiling code or building Docker images. It also provides shell command examples for dependency analysis using bazel query and standard Unix tools like sed and wc.
  • [INDIRECT_PROMPT_INJECTION]: The skill templates configure the build system to ingest local project files which could influence build behavior. This represents an inherent configuration surface for build tools.
  • Ingestion points: Processes local configuration via try-import %workspace%/user.bazelrc and dependency specifications in pnpm-lock.yaml through npm_translate_lock.
  • Boundary markers: Relies on standard Bazel configuration parsing and Starlark interpretation boundaries.
  • Capability inventory: Templates include the ability to execute subprocesses via ctx.actions.run and standard bazel CLI operations.
  • Sanitization: Build actions are governed by the Bazel sandbox and rule definitions which typically sanitize environment variables and inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:19 PM