code-formatter

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script uses subprocess.run to execute the 'black' formatter. The implementation uses a list of arguments rather than a shell string, which prevents shell injection vulnerabilities.
  • [SAFE]: No data exfiltration, obfuscation, or suspicious remote dependencies were identified. The file access and command execution are directly related to the skill's stated purpose of code formatting.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:28 AM
Security Audit — agent-trust-hub — code-formatter