make-python-recipe-deployable
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- Command Execution: The skill utilizes
dockeranduvcommands via thesubprocessmodule to build container images, run verification containers, and manage Python project dependencies. These operations are core to the skill's purpose of containerizing and verifying agent recipes. - External Downloads: During operation, the skill may download standard Python packages (e.g.,
tomlkit,ruamel.yaml,packaging,httpx) and base Docker images (e.g.,python:3.12-slim). These downloads originate from well-known registries and are necessary for the tool's functionality. - Execution of Project Code: The skill performs a 'boot check' and 'container verification' which involves executing code from the Python recipe being processed. Specifically, it imports the application object from the recipe's package into a test client and runs the generated container. While this involves running local project code, the skill implements a
run_allowlistand requires human confirmation before executing containers, which are standard safety measures for development tools. - Local File Operations: The skill reads and writes several project files, including
pyproject.toml,agent.py,manifest.yaml, and a newDockerfile. These modifications are performed to align the project with deployment standards and are limited to the target recipe directory.
Audit Metadata