python3-core
Pass
Audited by Gen Agent Trust Hub on May 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
assets/hatch_build.pyfile provides a build hook template that usessubprocess.runto execute project-local scripts (scripts/build-binaries.shorscripts/build-binaries.py). This is a standard mechanism for binary compilation in Python packaging. - [EXTERNAL_DOWNLOADS]: The
references/tool-library-registry.mdfile documents the installation of theuvpackage manager via its official installation script fromastral.sh. Astral is a well-known vendor in the Python ecosystem. - [EXTERNAL_DOWNLOADS]: The
assets/example.pre-commit-config.yamltemplate references several external GitHub repositories for standard code quality tools and hooks (e.g., ruff, shellcheck, prettier). These are reputable community-maintained resources.
Audit Metadata