python-developer

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configuration and tooling templates reference external repositories for pre-commit hooks. Specifically, it fetches hooks from the official pre-commit-hooks and the ruff-pre-commit repositories on GitHub, which are well-known and trusted sources.
  • [COMMAND_EXECUTION]: The provided tooling templates (Justfile and pre-commit configuration) facilitate the execution of local development commands using uv. This includes running ruff for linting, ty for type checking, pytest for testing, and prek for hook management.
  • [SAFE]: The instructions explicitly forbid the use of dangerous dynamic execution functions such as eval() and exec() within business logic. Furthermore, the skill's .gitignore asset follows security best practices by including patterns for sensitive files such as .env, private keys, and environment-specific configurations to prevent accidental data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 07:19 AM