bazel-build-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Bazel rulesets (rules_js, rules_python) from official repositories under the bazelbuild and aspect-build GitHub organizations.
- [INDIRECT_PROMPT_INJECTION]: The skill's logic for query and dependency analysis ingests untrusted data from the local repository and git history.
- Ingestion points: Processes
pnpm-lock.yamlvianpm_translate_lockand git history via shell interpolation inbazel querycommands (e.g., Template 6). - Boundary markers: Includes explicit instructions to verify pinned versions, checksums, and remote endpoints, and warns against accepting placeholder values.
- Capability inventory: Utilizes
bazel(build/query),git, and text processing tools (sed,tr) which are used to construct shell commands. - Sanitization: Relies on manual verification steps provided in the instructions rather than automated sanitization of repository data.
Audit Metadata