python-coding-standards

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/verify_doc_only_diff.py and a shell script scripts/smoke_test.sh that execute commands. The Python script uses subprocess.run with list-based arguments to interact with the local git binary (e.g., git rev-parse, git show) to compare file states. The shell script performs routine git operations in a temporary directory for testing purposes.\n- [EXTERNAL_DOWNLOADS]: The skill documentation references external resources from the official Pydantic GitHub organization (github.com/pydantic/skills) for modeling guidance. This is a trusted and well-known industry source.\n- [INDIRECT_PROMPT_INJECTION]: The verify_doc_only_diff.py script constitutes a vulnerability surface as it processes external data (Python source files and git history). Ingestion points include reading local .py files and git objects. The risk is assessed as safe because the script uses secure list-based subprocess calls and performs strictly defined auditing tasks without sensitive data access.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 06:05 PM