python-code-quality

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFE
Full Analysis
  • Command Execution for Development Tasks: The skill defines several commands using uv run poe to execute local code quality tools like Ruff, Pyright, and MyPy. These commands are intended for linting and formatting the codebase within a controlled local environment.
  • Local Git Hooks: The prek-install command is used to set up pre-commit hooks. This is a standard development workflow used to automate code quality checks before changes are committed to a repository.
  • Task Runner Execution: The documentation mentions a local script (scripts/task_runner.py) that uses a thread pool for parallel execution of tasks. This is a common pattern for improving the performance of linting suites in large projects.
  • Indirect Prompt Injection Surface: As a tool that interacts with and analyzes local source code, the skill naturally has an interface with external data. While static analysis tools like linters are generally passive, it is a standard security practice to ensure that the code being analyzed comes from trusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 04:37 PM