zig-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOW
Full Analysis
- [NO_CODE] (SAFE): The skill contains only markdown documentation files (
.md). There are no executable scripts (.sh, .py, .js), configuration files, or build manifests that perform actions on the host system. All code examples are static text within markdown blocks. - [DATA_EXFILTRATION] (SAFE): No sensitive file access or network communication patterns were detected. Documentation examples use standard libraries and do not reference credentials or private data.
- [COMMAND_EXECUTION] (SAFE): Code snippets illustrate Zig's FFI (Foreign Function Interface) and memory management features but do not include patterns for arbitrary shell execution or unsafe system calls.
- [EXTERNAL_DOWNLOADS] (SAFE): The files mention external C libraries (raylib, SDL, curl) as examples of interoperability, but there are no instructions or scripts to download or execute untrusted remote resources.
Audit Metadata