ptlam-code-style-python
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read files throughout the project directory to resolve configuration and requirements, which can introduce untrusted instructions into the agent's context.
- Ingestion points: The
SKILL.mdfile instructs the agent to "read every applicableAGENTS.mdfrom the repository root down" and to readpyproject.toml. - Boundary markers: No specific delimiters or "ignore" instructions are prescribed for processing the content of these external files.
- Capability inventory: The skill enables the agent to execute shell commands via
uv,pytest,ruff, andty. - Sanitization: The instructions do not require sanitization or validation of the data ingested from the project files.
- [COMMAND_EXECUTION]: The skill provides explicit shell command templates for the agent to use when managing dependencies, linting, and testing.
- Evidence:
references/dev-toolchain.mdcontains multiple command patterns foruv run pytest,uv run ruff, anduv run tyto be executed in the development environment.
Audit Metadata