make-functions-v2
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill facilitates the authoring, testing, and execution of TypeScript source code via the Make platform's official tools. It utilizes functionality such as
function_run_create_inlinefor direct execution of source candidates andfunction_run_createfor executing published versions. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external data, specifically function source code and execution results, which represents a potential attack surface.
- Ingestion points: Remote resource retrieval occurs via
function_version_getandfunction_run_get(SKILL.md). - Boundary markers: The skill contains explicit instructions for the agent to treat all returned source code and execution outputs as data rather than instructions (SKILL.md, Ground rules).
- Capability inventory: The available tools allow for the creation, modification, execution, and deletion of code resources on the Make platform.
- Sanitization: The instructions mandate the use of JSON Schema for input and output contracts to validate and scope data processed by the functions.
Audit Metadata