python3-core

Pass

Audited by Gen Agent Trust Hub on May 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The assets/hatch_build.py file provides a build hook template that uses subprocess.run to execute project-local scripts (scripts/build-binaries.sh or scripts/build-binaries.py). This is a standard mechanism for binary compilation in Python packaging.
  • [EXTERNAL_DOWNLOADS]: The references/tool-library-registry.md file documents the installation of the uv package manager via its official installation script from astral.sh. Astral is a well-known vendor in the Python ecosystem.
  • [EXTERNAL_DOWNLOADS]: The assets/example.pre-commit-config.yaml template references several external GitHub repositories for standard code quality tools and hooks (e.g., ruff, shellcheck, prettier). These are reputable community-maintained resources.
Audit Metadata
Risk Level
SAFE
Analyzed
May 22, 2026, 02:52 PM
Security Audit — agent-trust-hub — python3-core