code-formatter-installer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches pre-commit hook configurations from well-known repositories including Black (psf), isort (pycqa), Ruff (astral-sh), and mypy (pre-commit).
- [EXTERNAL_DOWNLOADS]: The skill uses official GitHub Actions (actions/checkout, actions/setup-node) for CI integration suggestions.
- [COMMAND_EXECUTION]: The instructions involve standard package installation commands for development dependencies (npm, pip) and tool initialization commands (npx husky init, pre-commit install) required for the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests project metadata to identify the language and framework stack in order to provide appropriate configuration templates.
- Ingestion points: Local project files during the "Detect stack" phase.
- Boundary markers: None specified in the workflow.
- Capability inventory: File system write operations for generating configuration files (.prettierrc, .eslintrc, etc.) and adding build/format scripts.
- Sanitization: The skill uses pre-defined static templates for configuration generation, minimizing the risk of arbitrary content injection.
Audit Metadata