meta-pre-commit-quality-gate
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill executes standard Python linting and testing tools (ruff, mypy, pytest) on locally staged files using the uv package manager. This activity is restricted to the local workspace and intended project directories, aligning with its purpose as a pre-commit quality gate.
- [PROMPT_INJECTION]: The skill processes untrusted staged file paths which constitutes an indirect prompt injection surface.
- Ingestion points: Staged file list from git-diff in collect_staged step.
- Boundary markers: Absent in sub-agent prompts.
- Capability inventory: Subprocess calls to ruff, mypy, and pytest in SKILL.md.
- Sanitization: Sub-agent instructions specify filtering for .py files and project-specific directories (src/opensquilla/).
Audit Metadata