test-python-binding
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple shell commands to format, build, and test code, including
uv run pytest,just build-python, andcargo test. These operations are performed within the local development environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes project source code using tools like
ruffandpytest. This represents an ingestion point where malicious content embedded in the analyzed code could potentially influence the agent's behavior during the execution of these tools. - Ingestion points: Project source files and test files located in
python/,python/plugin/, andpython/tests/as specified inSKILL.md. - Boundary markers: Absent; the instructions do not specify delimiters or safety warnings for the code being processed.
- Capability inventory: Subprocess execution capabilities via
uv,pytest,just, andcargocommands. - Sanitization: No evidence of sanitization or validation of the code content before processing.
Audit Metadata