cpp-pro
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality templates and instructions for modern C++20/23 development, explicitly enforcing safety guidelines such as RAII, smart pointers, and const-correctness.
- [EXTERNAL_DOWNLOADS]: The skill references the use of CMake's
FetchContentto pull thefmtlibrary from its official GitHub repository. It also demonstrates dependency management via Conan for well-known libraries likespdlogandCatch2. These are standard, trusted practices in the C++ development community. - [COMMAND_EXECUTION]: The skill includes instructions for executing standard development toolchains, including CMake for builds, compiler sanitizers (AddressSanitizer, UndefinedBehaviorSanitizer) for memory safety, and static analysis tools like
clang-tidyandcppcheck. These tools are used for their intended purpose of improving code quality and security. - [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process and analyze C++ code (which could technically be an ingestion point for untrusted data), it includes mandatory instructions for running sanitizers and static analysis. This creates a defensive posture that mitigates the risk of processing malicious or malformed code. The surface is consistent with a developer tool and follows standard safety patterns.
Audit Metadata