plankton-code-quality
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill configures
PostToolUseandPreToolUsehooks to execute shell scripts (multi_linter.sh,protect_linter_configs.sh) on every file modification within the agent's environment.- [COMMAND_EXECUTION]: The system is designed to spawnclaude -psubprocesses to automatically apply code fixes based on linter output, representing a secondary execution layer.- [PROMPT_INJECTION]: The automated fixing workflow creates an indirect prompt injection surface. It feeds linter violations (which include code snippets from project files) into an AI subprocess. If the project files contain malicious instructions disguised as comments or code, they could potentially influence the behavior of the subprocess tasked with fixing the code.- [SAFE]: The skill references well-known development tools such asruff,uv,biome, andshellcheckfor its operations.
Audit Metadata