justfile-expert
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill acts as a comprehensive technical guide for the
justtask runner, providing legitimate patterns for project automation and task management. It defines standard workflows for development, testing, and deployment. - [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands within
justfiletemplates. These include common operations like removing build artifacts (rm -rf), running containers (docker build), and executing project-specific commands (e.g.,uv run pytest,bun run build). These commands are presented as reference material for user implementation and do not constitute instructions for unauthorized agent actions. - [EXTERNAL_DOWNLOADS]: The documentation suggests the installation of the
just-mcptool via package managers such asnpm,pip, andcargo. This is a specialized utility designed to bridge AI assistants with localjustfilerecipes and is mentioned as a standard configuration step for the user. - [DATA_EXFILTRATION]: The skill documents the use of
.envfiles and environment variable loading, which are core features of thejustrunner. There are no patterns suggesting unauthorized access to sensitive files or external data transmission.
Audit Metadata