python-packaging
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard templates and instructions for Python development. All referenced build backends (setuptools, hatchling, flit, poetry) and utilities (twine, build, pip) are well-known, official components of the Python packaging ecosystem.
- [SAFE]: Secret management instructions for PyPI publishing correctly advise the use of API tokens with clear placeholders (e.g.,
...your-token...) and the use of environment secrets in GitHub Actions workflows. - [SAFE]: The provided CI/CD examples utilize official and trusted GitHub Actions from the GitHub organization and the Python Packaging Authority (PyPA).
Audit Metadata