moonbit-practice
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Includes GitHub Actions configuration templates that fetch the official MoonBit toolchain installer from cli.moonbitlang.com and reference the moonbit-overlay on GitHub.
- [REMOTE_CODE_EXECUTION]: Provides example CI/CD workflows demonstrating the installation of the MoonBit toolchain via the official shell script.
- [COMMAND_EXECUTION]: Recommends utilizing the official
moontoolchain (includingide,check,fmt, andtest) for code navigation and verification instead of generic text-searching tools. - [INDIRECT_PROMPT_INJECTION]: As a developer-focused assistant, the skill instructs the agent to process and analyze user-provided MoonBit source code.
- Ingestion points: Processes project files via semantic search and build tools.
- Boundary markers: No specific delimiters or safety instructions for untrusted code are provided in the guide.
- Capability inventory: Utilizes the
moonbuild system and associated CLI tools for code processing. - Sanitization: Relies on the standard toolchain's internal handling of source files.
Audit Metadata