setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the project's detected package manager (npm, pnpm, yarn, or bun) to install dependencies and initialize tools like Husky via
npx husky init. - [EXTERNAL_DOWNLOADS]: The skill initiates the installation of well-known, standard development utilities (
husky,lint-staged,prettier) from the official NPM registry. - [PROMPT_INJECTION]: The skill identifies the project environment by reading local configuration files, which is a surface for indirect prompt injection.
- Ingestion points: Reads
package.jsonand project lockfiles (e.g.,package-lock.json,yarn.lock). - Boundary markers: Absent.
- Capability inventory: Executes shell commands for package installation and performs file system writes for configuration.
- Sanitization: Absent.
Audit Metadata