zig-build-system
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of
b.addSystemCommandandb.addRunArtifactto automate build tasks, such as fetching version information from Git or running custom code generation tools. These are standard features of the Zig build system used for legitimate development workflows. - [EXTERNAL_DOWNLOADS]: The skill provides examples of using the Zig package manager to fetch dependencies from public repositories, specifically referencing the
ziglibsorganization on GitHub. These references follow standard dependency management practices and target well-known community resources. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for processing project files including
build.zigandbuild.zig.zon, which constitutes an attack surface for indirect prompt injection. - Ingestion points: The agent reads project configuration files and source code from the local directory.
- Boundary markers: The instructions do not define specific delimiters for separating project data from agent instructions.
- Capability inventory: The skill facilitates build-time execution of system commands and compiled artifacts, as well as network operations for dependency fetching.
- Sanitization: No specific content sanitization or validation logic is applied to the ingested files by the skill instructions.
Audit Metadata