python-services
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No security issues detected. The skill provides high-quality engineering guidance and explicitly warns against insecure patterns, such as fail-open security decorators. Technical mentions of local configuration files (e.g.,
~/.config/uv/uv.tomland.env) are used solely for explaining tool behavior and do not involve unauthorized access or exfiltration patterns.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for systems that ingest untrusted data (e.g., FastAPI endpoints and third-party API responses). It provides mandatory remediation guidance by instructing users to validate all inputs at boundaries using Pydantic models and to treat all external data as untrusted. Capabilities include local tool execution (uv, pytest, ruff) which is standard for development workflows.\n- [EXTERNAL_DOWNLOADS]: The skill recommends using industry-standard Python development tools and libraries such as uv, ruff, FastAPI, and Pydantic. These sources are well-known, reputable, and widely used within the software development community.
Audit Metadata