python-dead-code
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs on installing standard Python development tools
vultureandrufffrom official package registries usingpiporuv. These are well-known and widely used community tools for static analysis. - [COMMAND_EXECUTION]: The skill uses local command execution to run linting and dead code detection. The commands (
ruff check,vulture) are scoped to the project target and perform non-destructive static analysis (parsing the AST of Python files). - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing output from external tools that analyze codebases. While the agent processes this data to categorize findings, the risk is negligible as the tools used (ruff/vulture) produce structured textual reports and do not execute the code being analyzed.
Audit Metadata