qemu-build
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established software development best practices for building large C/C++ projects like QEMU. It includes explicit instructions to avoid accidental commits of build artifacts by using
.git/info/exclude. - [SAFE]: The
scripts/preflight.shscript is a benign diagnostic tool that checks for the presence and versions of standard build tools (e.g., ninja, meson, python3) and verifies host environment compatibility (macOS vs Linux). It does not perform unauthorized network operations or access sensitive credentials. - [SAFE]: The audit workflow requires extensive documentation of commands and results in a local
.oh-my-qemu/directory, promoting transparency and reproducibility without exfiltrating data to external services. - [SAFE]: The skill explicitly defines boundaries, instructing the agent not to submit patches upstream automatically and to respect the project's code provenance guidelines, preventing unauthorized code contributions.
Audit Metadata