genvm-lint
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
genvm-linterpackage and provides a command to download necessary GenVM artifacts. These are standard operations for a specialized development tool. - [COMMAND_EXECUTION]: Bash is used to execute the
genvm-lintCLI for checking, validating, and generating schemas from contract files. These operations are performed on local files and do not involve untrusted parameters or network exfiltration. - [PROMPT_INJECTION]: The skill processes user-provided contract files (e.g.,
contracts/*.py). This is a known risk surface for indirect prompt injection common to all code analysis tools. - Ingestion points: Contract files read by the
genvm-linttool. - Boundary markers: Absent.
- Capability inventory: File read and Bash execution for linting.
- Sanitization: None specified, which is typical for linters where the input is treated as code to be analyzed.
Audit Metadata