python-dead-code

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for static analysis using reputable open-source tools. No malicious behaviors such as prompt injection, data exfiltration, or obfuscation were detected.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of ruff and vulture from official package registries (PyPI) and their respective GitHub repositories. These are well-known services in the Python development ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external Python codebases, the analysis is mediated through static analysis tools. The instructions include specific guidance on manually reviewing and verifying findings, particularly for complex code patterns (e.g., dynamic imports and framework conventions), which acts as a safeguard against misinterpreting code as dead.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:50 PM