python-core

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference for Python development best practices and does not contain executable code, external dependencies, or network operations.
  • [SAFE]: Includes a dedicated security section that correctly identifies and provides mitigations for critical Python security risks:
  • Recommends against using shell=True in subprocess to prevent command injection.
  • Advises using yaml.safe_load() and avoiding pickle for untrusted data to prevent remote code execution.
  • Recommends ast.literal_eval() over eval() for safe string evaluation.
  • Recommends using parameterized queries for database operations to prevent SQL injection.
  • Provides patterns for preventing path traversal using pathlib.Path.resolve().
  • [SAFE]: All external links point to official documentation (PEPs, Google Style Guide, Python.org) or well-known, reputable educational resources (Real Python).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:13 AM
Security Audit — agent-trust-hub — python-core