ac-adopting-ruff
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several Python scripts (
scripts/discover_violations.py,scripts/scan_queue.py, andscripts/cli.py) that facilitate the migration process. - These scripts use
subprocess.runto invoke theruffCLI tool for auditing rules and checking for violations. - The execution is performed using list-based arguments without
shell=True, following secure coding practices for subprocess management. - The scripts are intended for local execution within a development environment to automate linting configuration.
- [SAFE]: The skill demonstrates high security awareness by providing a detailed reference (
references/dangerous-auto-fixes.md) that warns users about semantically risky auto-fixes (e.g.,PLR6104,N805,PTH1xx). - It repeatedly emphasizes the necessity of human review (
git diff) after automated changes. - External references, such as the recommended pre-commit hook source (
github.com/astral-sh/ruff-pre-commit), target the official and trusted repository for the tool. - The skill uses a modern and safe dependency management approach for its own scripts using the
uvscript metadata format.
Audit Metadata