xmake-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent/user to perform troubleshooting by executing xmake commands with diagnostic flags (e.g.,
xmake -vD,xmake f -c). It also includes commands for cleaning the project environment, such asxmake clean --allandrm -rf .xmaketo remove local cache directories. - [DYNAMIC_EXECUTION]: The
xmake l cli.bisectfunctionality is detailed, which involves the dynamic execution of shell commands or Lua scripts in a loop to identify the first bad commit in a regression. The skill provides examples of Lua scripts usingos.execandos.iorunfor automated testing during the bisect process. - [EXTERNAL_DOWNLOADS]: The skill mentions the
xrepopackage manager, which downloads dependencies and tools, specifically referencing the installation and setup of the EmmyLua debugger environment (xrepo env -b emmylua_debugger). - [INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface where the
cli.bisecttool processes user-provided shell commands and scripts. - Ingestion points: Shell commands passed via the
-cflag and Lua scripts via the-sflag in thexmake l cli.bisectutility. - Boundary markers: None are present in the documentation; instructions are processed directly by the tool's execution engine.
- Capability inventory: The skill uses tools capable of subprocess execution (
os.exec), filesystem modification (rm -rf), and network access (viaxrepo). - Sanitization: No input sanitization or validation is mentioned for the command strings or script paths provided to the bisect tool.
Audit Metadata