justfile-expert
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and provides guidance on authoring justfiles. It promotes security best practices, such as using the
quote()function to prevent command injection during parameter interpolation. - [EXTERNAL_DOWNLOADS]: The documentation mentions installing the 'just-mcp' tool using standard package managers like npm (npx), uv (uvx), or cargo. These are well-known services and represent standard installation procedures for the described functionality.
- [COMMAND_EXECUTION]: The skill mentions a helper script at
${CLAUDE_PLUGIN_ROOT}/scripts/just-recipe-help.pyused for auditing recipe documentation. This appears to be a local utility script within the agent's environment. - [DYNAMIC_EXECUTION]: The skill documents the use of shebang recipes in justfiles, which allow for executing multi-line logic in various interpreters (Python, Node.js, Bash, Ruby). This is a standard feature of the 'just' tool being documented.
Audit Metadata