plankton-code-quality
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes platform-native
PreToolUseandPostToolUsehooks to execute shell scripts such asmulti_linter.sh,protect_linter_configs.sh, andstop_config_guardian.sh. These scripts run automatically during file edits to ensure code quality and configuration integrity. - [REMOTE_CODE_EXECUTION]: The Phase 3 'Delegate + Verify' workflow involves spawning
claude -psubprocesses. These subprocesses are used to route code violations to specific model tiers (Haiku, Sonnet, or Opus) based on complexity to perform automated repairs. - [EXTERNAL_DOWNLOADS]: The skill requires several external dependencies for its formatting and linting functions, including tools like
ruff,uv,biome,shellcheck, andhadolint, typically installed via system package managers or language-specific registries. - [COMMAND_EXECUTION]: A specific
PreToolUsehook is implemented to monitor and block legacy package manager commands (e.g.,pip,npm,poetry) in favor of preferred alternatives likeuvorbun, serving as a workflow enforcement mechanism.
Audit Metadata