python-development

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes building applications that process external data via web frameworks and databases, which introduces an indirect injection surface.
  • Ingestion points: FastAPI request bodies, Pydantic models, and SQLAlchemy database records in references/detailed-guide.md.
  • Boundary markers: SKILL.md includes explicit instructions to 'Validate untrusted input at the edge' and 'Use parameterized queries'.
  • Capability inventory: Execution of local development tools (pytest, ruff, mypy), database migrations (alembic), and network operations (httpx) described across both files.
  • Sanitization: Instructions mandate using framework-supported encoding and avoiding the deserialization of untrusted code.
  • [COMMAND_EXECUTION]: The guide provides numerous examples of standard Python development and project management commands.
  • References usage of uv, poetry, pytest, ruff, mypy, nox, just, and task for routine tasks like linting, testing, and environment management.
  • Includes examples of CLI tool installation using uv tool install, which is a standard package management operation.
  • [EXTERNAL_DOWNLOADS]: The guide references several well-known and official repositories for development tools.
  • Links to official documentation and repositories for Ruff, mypy, and pre-commit hooks hosted on GitHub.
  • Provides examples of fetching data from generic external APIs (api.example.com) using httpx in code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 03:08 PM