python-script-developer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides explicit guidance on safe process execution.
- Recommends
subprocess.runwith list-based arguments overshell=Trueto prevent command injection inreferences/anti-patterns.md. - Warns against using
os.systemand string-concatenated paths. - [INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection risks through structured output and validation.
- Provides predefined templates in
assets/templates/to ensure a consistent security posture. - Includes
scripts/validate-script.pyto programmatically verify that generated scripts follow safety rules like specific exception handling and proper shebangs. - [EXTERNAL_DOWNLOADS]: Manages external dependencies using established ecosystem tools.
- Supports standard package managers like
pip,uv, andpoetryas documented inreferences/package-managers.md. - Suggests well-known, trusted libraries such as
tqdmfor progress bars andPyYAMLfor configuration handling.
Audit Metadata