ruff

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for using Ruff, a high-performance Python linter and formatter. The execution patterns using uv run ruff are standard for the tool's ecosystem.
  • [SAFE]: External references and dependencies, such as the ruff-pre-commit hooks and GitHub Actions, point to official and well-known repositories owned by the astral-sh organization.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The skill includes a dedicated reference for security-related linting rules (Bandit/S-prefix), which assists developers in identifying vulnerabilities in their own code.
  • [SAFE]: The data processing surface (linting Python files) is typical for development-oriented agents. The skill performs static analysis on local files without executing the analyzed code, minimizing the risk of indirect injection during the linting process.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:57 AM
Security Audit — agent-trust-hub — ruff