moonbit-c-binding
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/run-asan.pyutility executes local system commands includingmoon test,cc, andbrew. These calls are used to probe compiler support, compile temporary objects for AddressSanitizer, and run the project's test suite. - [COMMAND_EXECUTION]: The script generates a minimal C source file and compiles it at runtime using the system compiler. This is done to create a temporary replacement for the default MoonBit allocator library, which is a required step for AddressSanitizer to track memory allocations correctly.
- [EXTERNAL_DOWNLOADS]: On macOS, the script may interact with Homebrew (
brew) to locate LLVM components. This is a standard dependency management practice and targets a well-known service.
Audit Metadata