find-dead-code
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several standard command-line tools including
git,grep,vulture,pylint, andripgrep. These are used appropriately for their documented purposes: determining file changes, filtering results, and performing static analysis to find dead code. - [EXTERNAL_DOWNLOADS]: The skill uses
uvxto runvulture.uvxis a package runner (similar to npx) that may download the specified tool from the Python Package Index (PyPI).vultureis a widely recognized and reputable static analysis tool for Python. - [REMOTE_CODE_EXECUTION]: The execution of
vultureviauvxandpylintviauv runconstitutes running external code, but these are well-known development tools used locally on the codebase and do not represent a security risk in this context.
Audit Metadata