python-lint
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard shell commands such as
ls,grep,uv, andpythonto inspect the project structure and execute the Ruff linting tool. These actions are directly relevant to the skill's purpose and are conducted within the local repository context. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
ruffpackage usinguvorpip. Ruff is a well-known, high-performance Python linter and formatter developed by Astral. The instructions prioritize pinned versions to prevent unexpected behavior from tool updates. - [SAFE]: The included
check_ruff_config.pyscript performs a read-only analysis of configuration files likepyproject.tomlto identify potential misconfigurations. The script does not engage in network operations, dynamic code execution, or unauthorized file modifications. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from configuration files including
pyproject.toml,setup.cfg,tox.ini, and.flake8. While explicit boundary markers are not used in the processing script, the ingestion is managed through standard libraries liketomlliband regex-based searching. The skill's capability inventory is limited to environment inspection and linting, and the data is used solely for configuration validation.
Audit Metadata