python-project-developer

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides scripts for building and publishing Python packages (publish.sh, publish.bat) using python -m build and twine upload. These are standard tools for Python package management.
  • [COMMAND_EXECUTION]: The testing guide includes subprocess.run calls within TestCLIFlags to verify CLI behavior. This is a common and appropriate pattern for integration testing of command-line tools.
  • [EXTERNAL_DOWNLOADS]: The skill instructions mention installing development dependencies like pytest, black, ruff, and mypy via pip. These are well-known and trusted utilities in the Python ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied project names and descriptions to generate code and documentation templates. While this is an ingestion surface, the generated output follows standard programming patterns and is intended for use within a controlled development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:13 AM