python-project-developer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts for building and publishing Python packages (
publish.sh,publish.bat) usingpython -m buildandtwine upload. These are standard tools for Python package management. - [COMMAND_EXECUTION]: The testing guide includes
subprocess.runcalls withinTestCLIFlagsto verify CLI behavior. This is a common and appropriate pattern for integration testing of command-line tools. - [EXTERNAL_DOWNLOADS]: The skill instructions mention installing development dependencies like
pytest,black,ruff, andmypyviapip. These are well-known and trusted utilities in the Python ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied project names and descriptions to generate code and documentation templates. While this is an ingestion surface, the generated output follows standard programming patterns and is intended for use within a controlled development environment.
Audit Metadata