python-development
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes building applications that process external data via web frameworks and databases, which introduces an indirect injection surface.
- Ingestion points: FastAPI request bodies, Pydantic models, and SQLAlchemy database records in
references/detailed-guide.md. - Boundary markers:
SKILL.mdincludes explicit instructions to 'Validate untrusted input at the edge' and 'Use parameterized queries'. - Capability inventory: Execution of local development tools (
pytest,ruff,mypy), database migrations (alembic), and network operations (httpx) described across both files. - Sanitization: Instructions mandate using framework-supported encoding and avoiding the deserialization of untrusted code.
- [COMMAND_EXECUTION]: The guide provides numerous examples of standard Python development and project management commands.
- References usage of
uv,poetry,pytest,ruff,mypy,nox,just, andtaskfor routine tasks like linting, testing, and environment management. - Includes examples of CLI tool installation using
uv tool install, which is a standard package management operation. - [EXTERNAL_DOWNLOADS]: The guide references several well-known and official repositories for development tools.
- Links to official documentation and repositories for
Ruff,mypy, andpre-commithooks hosted on GitHub. - Provides examples of fetching data from generic external APIs (
api.example.com) usinghttpxin code snippets.
Audit Metadata