build-cmake
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/cmake_builder.pyutility invokescmake,ninja, andmakeusingsubprocess.runwith list-based arguments. This is the primary and expected function of the skill; the implementation is secure as it avoids the use ofshell=True, preventing shell injection vulnerabilities from user-supplied build parameters. - [EXTERNAL_DOWNLOADS]: The skill verifies the presence of local toolchains (such as
arm-none-eabi-gcc) usingshutil.whichbut does not perform any remote downloads or execution of external scripts. - [DATA_EXFILTRATION]: File access is restricted to the project's source and build directories for reading configuration (
CMakeLists.txt,CMakePresets.json) and locating output binaries. No network exfiltration or sensitive user directory access was detected.
Audit Metadata