makefile-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The 'Audit Mode' feature instructs the agent to ingest and analyze user-provided Makefiles, which creates a surface for indirect prompt injection if the input files contain malicious instructions.
- Ingestion points: The skill analyzes Makefile content provided during an audit.
- Boundary markers: No explicit delimiters or 'ignore' instructions are defined for the audited content.
- Capability inventory: The agent's actions are limited to reading files and generating a text-based audit report.
- Sanitization: No specific sanitization or filtering of the input file content is implemented.
- [COMMAND_EXECUTION]: The skill provides Makefile templates that define various shell command sequences.
- The
helptarget usesawkto parse the Makefile and format help text. - The
installanduninstalltargets utilizemkdir,ln,rm, andreadlinkto manage symlinks within the user's~/bindirectory. - The
linttarget invokesshellcheckon local scripts. - The
testtarget executes a local script via./test.sh.
Audit Metadata