lua-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CI workflow in
references/hooks.mddownloads the StyLua formatter binary directly from its official GitHub releases page (github.com/JohnnyMorganz/StyLua). This is a standard practice for environment setup in development-oriented skills. - [COMMAND_EXECUTION]: The skill provides various shell scripts for pre-commit hooks and CI/CD automation in
references/hooks.md. These include syntax checking withluac, linting withluacheck, and testing withbusted. These commands are standard for maintaining Lua code quality. - [REMOTE_CODE_EXECUTION]: The skill uses
hererocks(viapip) to manage Lua and LuaRocks installations in CI environments. This is a common and accepted method for version management in the Lua community. - [DYNAMIC_EXECUTION]: In
references/security.md, the skill explicitly warns against the dangers ofloadandloadstringwhen used with untrusted input, providing safe sandboxing alternatives using_ENVandsetfenv. This is a defensive security practice.
Audit Metadata