python-typing

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the setup of standard Python type checkers (mypy, pyright, ty) using established package managers like uv or pip. All recommended tools and repositories are from well-known and trusted organizations.- [SAFE]: The included utility script scripts/check_py_typed.py performs read-only inspections of project files and built artifacts (wheels/sdists) to verify the presence of py.typed markers. It does not perform network operations, execute arbitrary code, or modify the file system.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (such as pyproject.toml content and file layouts) to configure type checking. While this presents a theoretical attack surface for indirect prompt injection, the skill's operations are limited to standard development tasks and are consistent with its primary purpose.
  • Ingestion points: Reads pyproject.toml, mypy.ini, pyrightconfig.json, and scans the local directory structure.
  • Boundary markers: None explicitly defined in the skill instructions for raw file content.
  • Capability inventory: Package installation (uv add), file creation (touch), and configuration modification (pyproject.toml).
  • Sanitization: Relies on the agent's internal handling of file content and command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:06 AM