skills/openclaw/skills/makefile-build/Gen Agent Trust Hub

makefile-build

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The templates provided include shell commands for common build tasks, such as 'rm -rf' for cleaning directories, 'docker' for image management, and 'sudo apt install' for system dependencies within Justfile examples.\n- [EXTERNAL_DOWNLOADS]: The skill references official installation URLs for the Just and Task build tools on GitHub and taskfile.dev.\n- [PROMPT_INJECTION]: As the skill generates build configuration files based on project structure, there is a potential surface for indirect prompt injection if untrusted file names or metadata are interpolated into the generated scripts.\n- [DATA_EXFILTRATION]: Documentation mentions the inclusion of '.env.mk' files, which are conventionally used to store environment-specific secrets, though no exfiltration behavior is present.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:47 PM