xmake-repo-testing
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill serves as a guide for using the official xmake-io package repository testing scripts.
- [COMMAND_EXECUTION]: The skill documents the execution of the xmake CLI tool and local Lua scripts (scripts/test.lua). These commands are standard for the xmake build environment and are used to verify package build configurations.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves testing package recipes (xmake.lua files) which may be modified by users or contributors. This creates a surface where the build tool executes code from these files, which is a necessary feature for its intended primary purpose as a test runner. 1. Ingestion points: packages/a/name/xmake.lua within the local xmake-repo filesystem. 2. Boundary markers: The skill does not define specific boundary markers for the scripts it tests. 3. Capability inventory: Full command execution and Lua scripting capabilities provided by the xmake runtime. 4. Sanitization: Execution is performed through the standard xmake interpreter.
Audit Metadata