python-lint

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard shell commands such as ls, grep, uv, and python to inspect the project structure and execute the Ruff linting tool. These actions are directly relevant to the skill's purpose and are conducted within the local repository context.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the ruff package using uv or pip. Ruff is a well-known, high-performance Python linter and formatter developed by Astral. The instructions prioritize pinned versions to prevent unexpected behavior from tool updates.
  • [SAFE]: The included check_ruff_config.py script performs a read-only analysis of configuration files like pyproject.toml to identify potential misconfigurations. The script does not engage in network operations, dynamic code execution, or unauthorized file modifications.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from configuration files including pyproject.toml, setup.cfg, tox.ini, and .flake8. While explicit boundary markers are not used in the processing script, the ingestion is managed through standard libraries like tomllib and regex-based searching. The skill's capability inventory is limited to environment inspection and linting, and the data is used solely for configuration validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 02:50 PM
Security Audit — agent-trust-hub — python-lint