ac-adopting-ruff

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several Python scripts (scripts/discover_violations.py, scripts/scan_queue.py, and scripts/cli.py) that facilitate the migration process.
  • These scripts use subprocess.run to invoke the ruff CLI tool for auditing rules and checking for violations.
  • The execution is performed using list-based arguments without shell=True, following secure coding practices for subprocess management.
  • The scripts are intended for local execution within a development environment to automate linting configuration.
  • [SAFE]: The skill demonstrates high security awareness by providing a detailed reference (references/dangerous-auto-fixes.md) that warns users about semantically risky auto-fixes (e.g., PLR6104, N805, PTH1xx).
  • It repeatedly emphasizes the necessity of human review (git diff) after automated changes.
  • External references, such as the recommended pre-commit hook source (github.com/astral-sh/ruff-pre-commit), target the official and trusted repository for the tool.
  • The skill uses a modern and safe dependency management approach for its own scripts using the uv script metadata format.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:36 AM