python-scripting

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill provides a template for a root CLI group that uses importlib.import_module to automatically discover and register subcommands from modules within the same package. This dynamic loading is restricted to the package's local directory and is a common architectural pattern for extensible CLI frameworks.
  • [COMMAND_EXECUTION]: The skill includes instructions for creating subprocess wrappers using subprocess.run with argument lists. This is a structured and safe method for interacting with external system tools, and the instructions recommend checking for dependencies using shutil.which before execution.
  • [EXTERNAL_DOWNLOADS]: The project templates use uv to manage dependencies and execute code. These dependencies, such as click and hatchling, are downloaded from the official Python Package Index (PyPI), which is an established and trusted package registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 12:30 PM
Security Audit — agent-trust-hub — python-scripting