fix-mypy
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches information from
github.com/Azureandmypy.readthedocs.io. These are well-known and trusted sources for developer documentation and issue tracking. - [COMMAND_EXECUTION]: The skill performs several legitimate command-line operations required for code maintenance:
- Invokes
pip installto set up development environments and install package dependencies. - Uses
gitto track changes, identify target files, and create pull requests. - Executes
azpysdk, a vendor-specific tool, to run MyPy checks in an isolated environment. - Uses
grepto analyze local source code for existing type patterns. - [PROMPT_INJECTION]: The skill possesses an indirect injection surface because it reads and processes data from GitHub issues and local source code.
- Ingestion points: Reads GitHub issue descriptions and source code files via
grep. - Boundary markers: None identified.
- Capability inventory: Includes file writing, package installation via
pip, andgitoperations. - Sanitization: Relies on specific instructions to the agent to apply fixes only with '100% confidence' and strictly forbids changing code logic or adding non-typing dependencies.
Audit Metadata