ort-lint
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Dependency Installation: The skill references a standard
requirements-lintrunner.txtfile for installing Python dependencies viapip. This is a routine procedure for setting up development environments. - Tool Initialization: The
lintrunner initcommand is used to set up the linting environment. While this command typically downloads necessary linters (like clang-format or ruff), it is the standard initialization process for this specific utility in the ONNX Runtime project. - Indirect Prompt Injection Surface: As a tool designed to process, lint, and format external code files, the skill inherently possesses an indirect prompt injection surface. However, this risk is managed by the underlying static analysis tools (Ruff and Clang-format) and is a fundamental aspect of the skill's primary purpose.
Audit Metadata