hf-cloud-python-env-setup
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution for Environment Management: The
scripts/setup_env.pyscript uses thesubprocessmodule to create virtual environments and install dependencies. This is a standard and necessary function for environment setup skills. The implementation uses list-based arguments and avoids shell execution, which aligns with secure coding practices. - External Package Installation: The skill identifies
boto3andawsclias required dependencies inrequirements.txt. These are standard, well-known libraries for AWS integration and are fetched from official package registries during the setup process. - Environment Validation: The
scripts/check_versions.pyscript usesimportlib.metadatato safely inspect installed package versions. This is a safe method for verifying that the environment has been correctly configured without executing arbitrary code from the packages themselves.
Audit Metadata