python3-tools
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
tytype checker using official installation scripts fromastral.sh. These are well-known, legitimate installation methods for Astral's tooling. - [COMMAND_EXECUTION]: The skill utilizes standard project management and build commands such as
uv run,uv sync, andhatch build. These are expected operations for a Python development expertise skill and are performed within the project context. - [REMOTE_CODE_EXECUTION]: Reference documentation for the
hatchlingbuild backend describes the use of build hooks. These hooks allow the execution of custom Python code during the package build process, which is a standard feature for extending build functionality. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes untrusted project configuration files (e.g.,
pyproject.toml,ty.toml,.pre-commit-config.yaml). While this presents a potential surface for indirect prompt injection, the skill's capabilities are focused on standard development workflows, and the documentation includes advice on maintaining isolated environments for builds.
Audit Metadata