ruff
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
ruffcommand-line utility for various tasks, including linting (ruff check), formatting (ruff format), and repository analysis (ruff analyze graph). - [EXTERNAL_DOWNLOADS]: The documentation suggests installing the
ruffbinary using package managers likeuvor running it on-the-fly withuvxfrom official infrastructure. - [REMOTE_CODE_EXECUTION]: The instructions include usage of
uvx ruff@latest, which involves fetching theruffpackage from an external registry and executing it locally; this is a standard, non-malicious installation workflow for this tool.
Audit Metadata