justfile
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages the
justcommand runner, which executes shell commands defined inJustfilerecipes. It also instructs the agent to execute a local TypeScript linting tool using thebunruntime. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions for downloading the
justbinary from its official website (https://just.systems/install.sh). - [REMOTE_CODE_EXECUTION]: The installation guide describes a pattern of piping a remote script from
just.systems(the official domain for the tool) directly intobashfor installation. - [DYNAMIC_EXECUTION]: The skill utilizes a local script (
Tools/lint.ts) to perform structural validation of files at runtime. It also provides patterns for Justfiles that use backtick evaluation to execute shell commands during the parsing phase. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted Justfiles from a user's project directory while possessing significant capabilities.
- Ingestion points: Reads
Justfileand.justmodule files from the project directory as referenced inSKILL.mdandWorkflows/CheckJustfile.md. - Boundary markers: None; the skill does not define specific delimiters or instructions to ignore content within the files it processes.
- Capability inventory: The skill uses
Bash,Write,Edit,Grep, andGlobtools as defined in theSKILL.mdfrontmatter. - Sanitization: No sanitization or validation of the text content within the Justfiles is performed before the agent processes or lints them.
Audit Metadata