litestar-build
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external resources for its build and CI pipelines, including Python distributions from the Astral Python Build Standalone project, Node.js runtimes from Bun, and the Zig compiler. All referenced sources are well-known technology services or trusted organizations.
- [REMOTE_CODE_EXECUTION]: The GitHub Actions configurations include shell commands that pipe remote installation scripts to
shorbash(e.g., foruvandbunsetup). These operations target official, trusted domains (astral.sh and bun.sh) and are standard practices for environment provisioning in CI. - [COMMAND_EXECUTION]: A disk cleanup script for GitHub Actions runners is provided, which uses
sudo rm -rfto remove unnecessary pre-installed tools (like .NET, Android SDK, and GHC) to free space. This is a common and safe optimization for runner environments. - [DYNAMIC_EXECUTION]: The provided
bundler.pybuild script uses regular expressions to dynamically patch the Rust source code of thepyapplibrary during the build process to customize the installation directory. This is an intended development-time feature and does not involve untrusted data.
Audit Metadata