python-developer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration and tooling templates reference external repositories for pre-commit hooks. Specifically, it fetches hooks from the official pre-commit-hooks and the ruff-pre-commit repositories on GitHub, which are well-known and trusted sources.
- [COMMAND_EXECUTION]: The provided tooling templates (Justfile and pre-commit configuration) facilitate the execution of local development commands using
uv. This includes runningrufffor linting,tyfor type checking,pytestfor testing, andprekfor hook management. - [SAFE]: The instructions explicitly forbid the use of dangerous dynamic execution functions such as
eval()andexec()within business logic. Furthermore, the skill's.gitignoreasset follows security best practices by including patterns for sensitive files such as.env, private keys, and environment-specific configurations to prevent accidental data exposure.
Audit Metadata