managing-python-projects

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes uv run to execute Python scripts, modules, and testing frameworks. It also provides instructions for using chmod +x to make scripts executable, which is a standard operation for standalone Python development.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of development tools such as ruff, ty, pytest, pytest-cov, and prek. These tools are retrieved from standard registries or managed via uv to support code quality and testing workflows. The tools prek and ty are authored by the same vendor as the skill.
  • [DATA_EXFILTRATION]: Package publishing workflows are documented for PyPI and Test PyPI. These operations are legitimate for distribution and correctly use environment variables ($PYPI_TOKEN, $TEST_PYPI_TOKEN) for authentication rather than hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 07:34 AM
Security Audit — agent-trust-hub — managing-python-projects