python-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves reviewing user-provided Python code, which is a standard entry point for untrusted data in a developer tool. * Ingestion points: Python source code provided by the user (described in SKILL.md). * Boundary markers: There are no specific delimiters or instructions provided to the agent to isolate user code from its internal logic. * Capability inventory: The skill is intended for agents that have file reading and analysis capabilities. * Sanitization: The instructions do not mention sanitizing or filtering the input code.
- [SAFE]: The skill promotes security-positive patterns, such as avoiding hardcoded credentials and centralizing configuration management. All external libraries and tools referenced (like Pydantic, HTTPX, and Pytest) are standard and reputable components of the Python ecosystem.
Audit Metadata