python3-tools

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the ty type checker using official installation scripts from astral.sh. These are well-known, legitimate installation methods for Astral's tooling.
  • [COMMAND_EXECUTION]: The skill utilizes standard project management and build commands such as uv run, uv sync, and hatch build. These are expected operations for a Python development expertise skill and are performed within the project context.
  • [REMOTE_CODE_EXECUTION]: Reference documentation for the hatchling build backend describes the use of build hooks. These hooks allow the execution of custom Python code during the package build process, which is a standard feature for extending build functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes untrusted project configuration files (e.g., pyproject.toml, ty.toml, .pre-commit-config.yaml). While this presents a potential surface for indirect prompt injection, the skill's capabilities are focused on standard development workflows, and the documentation includes advice on maintaining isolated environments for builds.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 08:42 AM