python-typing
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the setup of standard Python type checkers (mypy, pyright, ty) using established package managers like
uvorpip. All recommended tools and repositories are from well-known and trusted organizations.- [SAFE]: The included utility scriptscripts/check_py_typed.pyperforms read-only inspections of project files and built artifacts (wheels/sdists) to verify the presence ofpy.typedmarkers. It does not perform network operations, execute arbitrary code, or modify the file system.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (such aspyproject.tomlcontent and file layouts) to configure type checking. While this presents a theoretical attack surface for indirect prompt injection, the skill's operations are limited to standard development tasks and are consistent with its primary purpose. - Ingestion points: Reads
pyproject.toml,mypy.ini,pyrightconfig.json, and scans the local directory structure. - Boundary markers: None explicitly defined in the skill instructions for raw file content.
- Capability inventory: Package installation (
uv add), file creation (touch), and configuration modification (pyproject.toml). - Sanitization: Relies on the agent's internal handling of file content and command execution.
Audit Metadata