code-quality
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation of standard development tools using official package managers (npm, pip, go, composer, gem). These tools, such as jscpd, eslint, and ruff, are well-known industry standards fetched from established registries.
- [COMMAND_EXECUTION]: The workflow incorporates common shell commands for running linters and formatters (e.g., eslint --fix, black, cargo clippy), which is necessary for the skill's stated purpose of code quality validation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external codebase data for analysis. The instructions include boundary markers and require user approval for high-risk changes, adhering to best practices for handling untrusted data.
- [REMOTE_CODE_EXECUTION]: The skill references remote tool installation, such as fetching golangci-lint via the go command. These operations target official, well-known software repositories.
Audit Metadata