Security audit
Makefile Linter
Security checks for vulnerabilities and agentic risk
Overview
This is a straightforward local Makefile linter that reads user-selected files and prints lint, target, and variable reports without network access, persistence, or hidden behavior.
Installers should treat this as a local analysis tool. Run it only on Makefiles or stdin content you intend to inspect, and review JSON or Markdown output before posting it because variable values from the Makefile may be included.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.