python-toolsmith
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill focuses on promoting secure development practices by providing defensive coding templates.
- [COMMAND_EXECUTION]: The skill provides explicit guidance on the safe use of subprocesses, instructing developers to avoid
shell=Trueand use argument lists to prevent shell injection vulnerabilities. - [PROMPT_INJECTION]: No evidence of prompt injection or attempts to override AI behavioral constraints was found in the instructions or templates.
- [DATA_EXFILTRATION]: No network exfiltration patterns or unauthorized data access behaviors were detected. The templates manage data locally using SQLite and standard configuration directories.
- [CREDENTIALS_UNSAFE]: The skill includes warnings against hardcoding secrets and provides templates for managing sensitive data using environment variables instead of hardcoded strings.
Audit Metadata