conventions-python
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard Python development tools for formatting, linting, type checking, and testing. It specifically recommends executing commands like
ruff format,ruff check,uv run mypy, anduv run pytestwithin the local environment. These are routine operations for software development and do not involve unauthorized privilege escalation or suspicious network activity. - [INDIRECT_PROMPT_INJECTION]: As a development aid, the skill is intended to process and interact with Python source code files which may come from untrusted external sources. While it recommends tools that execute code (such as
pytest), this is a standard capability required for the skill's primary purpose. - Ingestion points: Reading and editing local
*.pyfiles and project configuration likepyproject.toml. - Boundary markers: Not explicitly defined within the skill instructions.
- Capability inventory: Execution of linting and testing tools via the shell (
ruff,mypy,pytest,uv). - Sanitization: None described, as the skill provides guidelines for the agent's behavior rather than input filtering.
Audit Metadata