xmake-templates
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches templates from the official xmake-repo on GitHub and supports adding external template repositories via the
xrepo add-repocommand.\n- [DYNAMIC_EXECUTION]: Generatesxmake.luabuild scripts from templates, which are executed during the project build process.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external template data which can contain instructions influencing the agent or the build environment.\n - Ingestion points: External template repositories or user-global template directories (SKILL.md).\n
- Boundary markers: None described for isolating template content from agent instructions.\n
- Capability inventory: File system writing via
xmake create, network operations throughxrepo, and script execution viaxmake(across all referenced files).\n - Sanitization: Path traversal protections are documented for template IDs, but content-level sanitization is not mentioned.
Audit Metadata