python-dead-code
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for static analysis using reputable open-source tools. No malicious behaviors such as prompt injection, data exfiltration, or obfuscation were detected.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
ruffandvulturefrom official package registries (PyPI) and their respective GitHub repositories. These are well-known services in the Python development ecosystem. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external Python codebases, the analysis is mediated through static analysis tools. The instructions include specific guidance on manually reviewing and verifying findings, particularly for complex code patterns (e.g., dynamic imports and framework conventions), which acts as a safeguard against misinterpreting code as dead.
Audit Metadata