python-hints
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to process and apply rules based on user-provided Python source files and configuration data.
- Ingestion points: The skill ingests untrusted data from files matching
**/*.py,**/pyproject.toml,**/requirements*.txt, and**/setup.cfg(identified in SKILL.md). - Boundary markers: There are no explicit boundary markers or instructions defined to prevent the agent from following malicious instructions hidden within comments or strings in the processed code files.
- Capability inventory: The skill is designed for code analysis and generation; it does not explicitly invoke subprocesses, perform file-system writes, or conduct network operations within its own logic, though it guides the agent in writing such code.
- Sanitization: There is no evidence of sanitization, escaping, or validation of the content of the ingested files before they are processed by the agent.
Audit Metadata