static-code-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides configuration for pre-commit hooks that download tools from trusted repositories on GitHub, including the pre-commit organization, Python Software Foundation (PSF), and PyCQA. These are documented for use with the pre-commit framework.
- [COMMAND_EXECUTION]: Reference implementation scripts demonstrate the use of standard security tools like
npm auditto identify vulnerabilities in project dependencies. - [DYNAMIC_EXECUTION]: The skill includes reference TypeScript code that utilizes the TypeScript compiler API to perform static analysis of source code via Abstract Syntax Tree (AST) inspection, which is a standard approach for custom linting rules.
Audit Metadata