build-linux-binary
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the build lifecycle.
- It runs
bash build/linux/package-linux.shto initiate the main build and packaging process. - It uses
pkill -fto terminate existingdotnetand build script processes, ensuring no file locks interfere with the build. - It uses
rm -rfto clean up build artifacts (objfolders) during troubleshooting. - [EXTERNAL_DOWNLOADS]: The skill uses
git submodule update --remote --mergeto fetch and update theShareX.ImageEditordependency from its remote repository. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it relies on reading the contents of a build log file (
build_output.log) to determine its next actions. - Ingestion points: Monitors
build_output.logfor status updates. - Boundary markers: Absent; the agent scans the log stream for specific status strings like 'Done!' or 'FAILED'.
- Capability inventory: Includes shell command execution (
bash), process management (pkill), and file system deletion (rm). - Sanitization: The skill does not sanitize or validate the content of the log file before searching for markers, creating a potential surface for instructions embedded in build output to influence the agent's logic flow.
Audit Metadata