build-makefile
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/makefile_builder.pyuses thesubprocessmodule to executemake,gmake, ormingw32-makeand compiler toolchains. This behavior is standard and necessary for a build automation skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses
Makefilefiles from the project workspace. Becausemakeis a powerful tool that can execute arbitrary shell commands defined within those files, there is a theoretical surface for indirect prompt injection if a workspace contains a malicious Makefile. However, this risk is inherent to all build systems and the skill provides no unusual escalation paths. - Ingestion points: Reads
Makefile,makefile, orGNUmakefilefrom the user's workspace inscripts/makefile_builder.py. - Boundary markers: None implemented for the content of the Makefile itself.
- Capability inventory: Uses
subprocess.runto execute make and toolchain commands inscripts/makefile_builder.py. - Sanitization: Makefile variables are parsed via regex, but the actual build execution relies on the integrity of the project's own Makefile.
Audit Metadata