lintlang-audit
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
uvx --from lintlang==0.8.0which may download thelintlangpackage from the Python Package Index (PyPI) if it is not already available in the local environment. - [COMMAND_EXECUTION]: The skill executes shell commands (
lintlang --versionanduvx ... lintlang scan) to perform its auditing functions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit local files (YAML, Markdown, Python, etc.) that may contain malicious instructions intended to influence the AI agent's behavior. Ingestion points: User-specified file paths passed as arguments to the audit command. Boundary markers: The instructions explicitly warn the AI to treat output such as
evidenceanddescriptionas untrusted content. Capability inventory: Shell execution of thelintlangtool and reporting of file contents. Sanitization: The instructions direct the agent to report specific finding codes rather than full content excerpts to minimize the risk of executing embedded instructions.
Audit Metadata