click-patterns

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a collection of development templates and helper scripts for Python CLI development. Analysis of the scripts (generate-click-cli.sh, setup-click-project.sh, validate-click.sh) shows they perform legitimate scaffolding and environment setup tasks without malicious intent.
  • [COMMAND_EXECUTION]: The skill uses local shell commands to generate project structures and manage Python virtual environments. Scaffolding logic in scripts/generate-click-cli.sh includes regex-based validation for project names to prevent command injection or path traversal.
  • [EXTERNAL_DOWNLOADS]: The setup-click-project.sh script installs well-known, industry-standard Python packages (click, rich, pytest, black, etc.) from official registries. These are documented neutrally as standard project dependencies.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data access or external exfiltration. Example code for configuration management includes logic for handling .env files and API keys in a standard, safe manner (e.g., placing .env in .gitignore).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 02:12 PM
Security Audit — agent-trust-hub — click-patterns