Principle
Treat build and install script changes as executable code
Configuration that runs automatically is code with excellent timing.
When it fits
- A diff changes package scripts, Dockerfiles, Makefiles or setup configuration and looks like metadata.
When to avoid it
- Build systems vary; maintain a repository-specific sensitive-file list rather than relying only on common filenames.
Why it matters
Review changes to install hooks, build scripts, container files and generated-command paths for new shell execution, downloads, network calls or credential access. Require an explicit reason for new automatic execution and test it in an isolated environment first.
An example
A harmless-looking package.json change adds a postinstall curl command; the PR is treated as a code-execution change, not dependency metadata.
Check your result
Every new automatic command has an explicit purpose and review.
Keep this limit in mind
- Build systems vary; maintain a repository-specific sensitive-file list rather than relying only on common filenames.
Connected ideas
Useful withGive workflow changes their own approval gate
Evidence and sources
Supports
OWASP treats rules files, build scripts, CI workflows and package lifecycle scripts as security-sensitive control surfaces that deserve heightened review when an agent changes them.
The exact sensitive-file set depends on the repository and build system.
Secure Coding with AI Cheat Sheet · Rules Files; Prompt-to-Code Supply Chain Risk