kafka-python-client
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and run the official
uvinstallation script fromastral.sh. This targets a well-known service for Python tooling. - [COMMAND_EXECUTION]: Uses shell commands to synchronize dependencies (
uv sync) and execute tests (uv run pytest) within the generated project directory to ensure functional correctness. - [DATA_EXFILTRATION]: No exfiltration patterns detected. The skill explicitly follows best practices by instructing the agent not to read the user's
.envfiles and instead generate.env.examplewith placeholders for sensitive configuration. - [PROMPT_INJECTION]: No evidence of instructions to bypass safety guidelines or override agent behavior was found.
- [EXTERNAL_DOWNLOADS]: Fetches project dependencies and environment management tools from official registries and the official
astral.shsource. - [SAFE]: The skill incorporates strong security and operational best practices, including a mandatory confirmation step (hard gate) before performing write operations and clear warnings about schema verification when MCP discovery is unavailable.
Audit Metadata