yy-create-python-script

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands during the project verification phase, such as npm run lint and npm run ready, which trigger code formatting, unit tests, and dependency installation.
  • [EXTERNAL_DOWNLOADS]: The project setup process downloads standard development dependencies from official registries (npm and PyPI) including ruff, pyright, and pyinstaller.
  • [COMMAND_EXECUTION]: The Python template provided in the scripts/ directory contains logic to execute external shell commands via subprocess.Popen to process data rows. This is a documented feature of the template and uses shlex.split to safely parse arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 02:55 AM
Security Audit — agent-trust-hub — yy-create-python-script