skills/microsoft/onnxruntime/ort-lint/Gen Agent Trust Hub

ort-lint

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Dependency Installation: The skill references a standard requirements-lintrunner.txt file for installing Python dependencies via pip. This is a routine procedure for setting up development environments.
  • Tool Initialization: The lintrunner init command is used to set up the linting environment. While this command typically downloads necessary linters (like clang-format or ruff), it is the standard initialization process for this specific utility in the ONNX Runtime project.
  • Indirect Prompt Injection Surface: As a tool designed to process, lint, and format external code files, the skill inherently possesses an indirect prompt injection surface. However, this risk is managed by the underlying static analysis tools (Ruff and Clang-format) and is a fundamental aspect of the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:18 PM
Security Audit — agent-trust-hub — ort-lint