pantheon-ai/makefile-generator
Generate GNU Make build systems that define build targets, configure dependencies, set up phony targets, and implement parallel builds. Use when creating make/Makefile/.mk files, implementing compile rules, or building production-ready build automation for C/C++, Go, Python, and Java projects.
74
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The SKILL.md Lookup Process (Stage 2) explicitly mandates consulting external documentation—first via context7 and, if needed, a Fallback to WebSearch (e.g., "Trigger WebSearch when: ..."), and the Resources list public URLs (GNU Make Manual, GNU Coding Standards), so the agent will fetch and read untrusted public web content that can change generation/next actions.
Where we found it
context7
domain · 4 sites
The SKILL.md Stage 2 Lookup Process explicitly mandates using the context7 MCP service (via mcp__context7__resolve-library-id and mcp__context7__get-library-docs tool calls) to fetch external tool documentation when internal docs don't cover a specific integration.
SKILL.md
94
2. **Try context7 for external tool documentation** (when internal docs don't cover a specific tool):
SKILL.md
97
mcp__context7__resolve-library-id: "<tool-name>"
SKILL.md
98
mcp__context7__get-library-docs: topic="<integration-topic>"
SKILL.md
105
**Note:** Context7 may not have GNU Make-specific documentation. Skip if internal docs provide sufficient patterns.
WebSearch
domain · 5 sites
The SKILL.md Stage 2 Lookup Process explicitly mandates a fallback to WebSearch (web search tool) when internal docs and context7 don't cover the required integration, causing the agent to fetch and act on untrusted public web content.
SKILL.md
107
3. **Fallback to WebSearch** (only if pattern not found in internal docs OR context7):
SKILL.md
109
"<specific-feature>" makefile best practices 2025
SKILL.md
110
Example: "docker makefile best practices 2025"
SKILL.md
111
Example: "go ldflags version makefile 2025"
SKILL.md
113
**Trigger WebSearch when:** Internal docs don't cover the specific integration AND context7 returns no relevant results.
- Audited
- Security analysis