python-code-quality
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFE
Full Analysis
- Command Execution for Development Tasks: The skill defines several commands using
uv run poeto execute local code quality tools like Ruff, Pyright, and MyPy. These commands are intended for linting and formatting the codebase within a controlled local environment. - Local Git Hooks: The
prek-installcommand is used to set up pre-commit hooks. This is a standard development workflow used to automate code quality checks before changes are committed to a repository. - Task Runner Execution: The documentation mentions a local script (
scripts/task_runner.py) that uses a thread pool for parallel execution of tasks. This is a common pattern for improving the performance of linting suites in large projects. - Indirect Prompt Injection Surface: As a tool that interacts with and analyzes local source code, the skill naturally has an interface with external data. While static analysis tools like linters are generally passive, it is a standard security practice to ensure that the code being analyzed comes from trusted sources.
Audit Metadata