test-python-binding

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple shell commands to format, build, and test code, including uv run pytest, just build-python, and cargo test. These operations are performed within the local development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project source code using tools like ruff and pytest. This represents an ingestion point where malicious content embedded in the analyzed code could potentially influence the agent's behavior during the execution of these tools.
  • Ingestion points: Project source files and test files located in python/, python/plugin/, and python/tests/ as specified in SKILL.md.
  • Boundary markers: Absent; the instructions do not specify delimiters or safety warnings for the code being processed.
  • Capability inventory: Subprocess execution capabilities via uv, pytest, just, and cargo commands.
  • Sanitization: No evidence of sanitization or validation of the code content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 11:05 AM
Security Audit — agent-trust-hub — test-python-binding