justfile-expert

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely instructional and provides guidance on authoring justfiles. It promotes security best practices, such as using the quote() function to prevent command injection during parameter interpolation.
  • [EXTERNAL_DOWNLOADS]: The documentation mentions installing the 'just-mcp' tool using standard package managers like npm (npx), uv (uvx), or cargo. These are well-known services and represent standard installation procedures for the described functionality.
  • [COMMAND_EXECUTION]: The skill mentions a helper script at ${CLAUDE_PLUGIN_ROOT}/scripts/just-recipe-help.py used for auditing recipe documentation. This appears to be a local utility script within the agent's environment.
  • [DYNAMIC_EXECUTION]: The skill documents the use of shebang recipes in justfiles, which allow for executing multi-line logic in various interpreters (Python, Node.js, Bash, Ruby). This is a standard feature of the 'just' tool being documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 07:30 AM