build-system
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for various build systems (npm, yarn, pnpm, pip, poetry, gradle, maven, cargo, go, make) to build and test code based on detected environment files.
- [DYNAMIC_EXECUTION]: The skill facilitates dynamic command generation and execution through user-provided flags (
--cmd,--filter) and configuration overrides defined in the project's.claude/config.jsonfile. - [EXTERNAL_DOWNLOADS]: Execution of standard build commands such as
pip install -r requirements.txtandpoetry installinvolves downloading packages from external package registries. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted local project files to determine which shell commands to execute, creating a potential attack surface if those files are maliciously crafted.
- Ingestion points: Project manifest and lock files including
package.json,yarn.lock,pnpm-lock.yaml,pyproject.toml,requirements.txt,Cargo.toml,go.mod,build.gradle,pom.xml,Makefile, and the configuration file.claude/config.json. - Boundary markers: Absent.
- Capability inventory: Ability to execute arbitrary shell commands for build and test workflows.
- Sanitization: Absent.
Audit Metadata