litestar-build

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The GitHub Actions references include a 'Free additional space' step using sudo rm -rf. This command targets directories containing pre-installed SDKs (e.g., .NET, Android, GHC) on ephemeral CI runners to reclaim disk space. This is a documented and standard practice for managing large builds in CI environments.
  • [EXTERNAL_DOWNLOADS]: Instructions are provided for fetching build-time assets, including Python distributions and development tools (uv, bun, zig). These downloads are performed from trusted repositories and well-known service domains, such as GitHub and project-official websites.
  • [DYNAMIC_EXECUTION]: The packaging workflow includes a build script (bundler.py) designed to modify Rust source code (app.rs) and project metadata (Cargo.toml) dynamically. This allows the user to hardcode custom installation directories and static linking requirements into the final application binary.
  • [REMOTE_CODE_EXECUTION]: The skill documents common installation patterns for developer tools involving curl | sh pipes. These patterns target reputable, official endpoints provided by Astral Software and the Bun project, which are considered well-known and safe services.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:15 AM