litestar-build
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The GitHub Actions references include a 'Free additional space' step using
sudo rm -rf. This command targets directories containing pre-installed SDKs (e.g., .NET, Android, GHC) on ephemeral CI runners to reclaim disk space. This is a documented and standard practice for managing large builds in CI environments. - [EXTERNAL_DOWNLOADS]: Instructions are provided for fetching build-time assets, including Python distributions and development tools (uv, bun, zig). These downloads are performed from trusted repositories and well-known service domains, such as GitHub and project-official websites.
- [DYNAMIC_EXECUTION]: The packaging workflow includes a build script (
bundler.py) designed to modify Rust source code (app.rs) and project metadata (Cargo.toml) dynamically. This allows the user to hardcode custom installation directories and static linking requirements into the final application binary. - [REMOTE_CODE_EXECUTION]: The skill documents common installation patterns for developer tools involving
curl | shpipes. These patterns target reputable, official endpoints provided by Astral Software and the Bun project, which are considered well-known and safe services.
Audit Metadata