cpp-pro
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides configuration templates that reference well-known and trusted C++ resources, including the 'fmt' library hosted on GitHub and various standard packages available through the Conan package manager. These downloads are integral to the standard C++ development workflow and utilize reputable sources.\n- [INDIRECT_PROMPT_INJECTION]: As a developer tool that processes C++ source code and build files, the skill has an inherent surface for ingesting untrusted data. However, it incorporates strong defensive practices by mandating the use of static analysis (clang-tidy, cppcheck) and runtime sanitizers (AddressSanitizer, UndefinedBehaviorSanitizer, ThreadSanitizer) which help identify and prevent the execution of malicious or unsafe code patterns.\n
- Ingestion points: External C++ source files, header files, and CMake configuration scripts processed during development tasks.\n
- Boundary markers: Not explicitly defined in the workflow instructions.\n
- Capability inventory: The skill possesses capabilities for file modification and command execution related to building and testing C++ applications.\n
- Sanitization: Relies on professional-grade toolchains and sanitizers to validate the safety of code before execution.
Audit Metadata