python-core
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for Python development best practices and does not contain executable code, external dependencies, or network operations.
- [SAFE]: Includes a dedicated security section that correctly identifies and provides mitigations for critical Python security risks:
- Recommends against using
shell=Trueinsubprocessto prevent command injection. - Advises using
yaml.safe_load()and avoidingpicklefor untrusted data to prevent remote code execution. - Recommends
ast.literal_eval()overeval()for safe string evaluation. - Recommends using parameterized queries for database operations to prevent SQL injection.
- Provides patterns for preventing path traversal using
pathlib.Path.resolve(). - [SAFE]: All external links point to official documentation (PEPs, Google Style Guide, Python.org) or well-known, reputable educational resources (Real Python).
Audit Metadata