precommit-setup

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for project initialization (e.g., running attune_init.py), dependency management using uv, and the installation of pre-commit hooks. It also provides scripts for component-level linting and testing.
  • [EXTERNAL_DOWNLOADS]: The skill configures the download of pre-commit hooks from reputable GitHub repositories, including those maintained by the pre-commit organization, Astral (Ruff), and PyCQA (Bandit).
  • [SAFE]: The skill does not exhibit any malicious patterns such as credential harvesting, data exfiltration, or persistence mechanisms. All external references are to well-known development tools and official repositories, and the provided bash scripts perform standard development tasks like cache cleanup and test execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:49 PM