python-hints

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to process and apply rules based on user-provided Python source files and configuration data.
  • Ingestion points: The skill ingests untrusted data from files matching **/*.py, **/pyproject.toml, **/requirements*.txt, and **/setup.cfg (identified in SKILL.md).
  • Boundary markers: There are no explicit boundary markers or instructions defined to prevent the agent from following malicious instructions hidden within comments or strings in the processed code files.
  • Capability inventory: The skill is designed for code analysis and generation; it does not explicitly invoke subprocesses, perform file-system writes, or conduct network operations within its own logic, though it guides the agent in writing such code.
  • Sanitization: There is no evidence of sanitization, escaping, or validation of the content of the ingested files before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 09:04 AM
Security Audit — agent-trust-hub — python-hints