compile-analysis
Warn
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
scripts/analyze_compile.shusesevalto execute command strings retrieved from the output ofscripts/get_compile_command.py. These commands are derived from parsing local Ninja build files. - [DYNAMIC_EXECUTION]: The skill programmatically generates new shell scripts (e.g.,
compile_single_file_{name}.sh) by interpolating data extracted from the Ninja build system into pre-defined templates. These scripts are subsequently written to the project's output directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from build artifacts which can influence agent execution.
- Ingestion points: The skill ingests data from the build environment via
scripts/get_compile_command.py(parsing.ninjafiles) andscripts/parse_ii.py(parsing.iipreprocessed files). - Boundary markers: The ingestion process lacks explicit boundary markers or security delimiters when processing these external files.
- Capability inventory: The skill possesses the capability to execute shell commands (via
evalinanalyze_compile.sh) and create executable script files on the local file system. - Sanitization: There is no significant sanitization of the content extracted from build files before it is used to construct shell commands, beyond basic handling of Ninja variable escaping.
Audit Metadata