make
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The provided Makefile examples use standard build utilities such as gcc, mkdir, and rm, which are necessary and expected for C/C++ development.
- [PROMPT_INJECTION] (LOW): Indirect Prompt Injection Surface identified. The skill facilitates the processing and creation of Makefiles (Ingestion Point: user-provided queries and project content). Makefiles are capable of executing arbitrary shell commands through recipes and the $(shell) function (Capability: references/cheatsheet.md). The skill does not include specific boundary markers or instructions to sanitize content when the agent handles third-party or untrusted Makefiles (Boundary markers and Sanitization: Absent).
Audit Metadata