click-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of development templates and helper scripts for Python CLI development. Analysis of the scripts (
generate-click-cli.sh,setup-click-project.sh,validate-click.sh) shows they perform legitimate scaffolding and environment setup tasks without malicious intent. - [COMMAND_EXECUTION]: The skill uses local shell commands to generate project structures and manage Python virtual environments. Scaffolding logic in
scripts/generate-click-cli.shincludes regex-based validation for project names to prevent command injection or path traversal. - [EXTERNAL_DOWNLOADS]: The
setup-click-project.shscript installs well-known, industry-standard Python packages (click,rich,pytest,black, etc.) from official registries. These are documented neutrally as standard project dependencies. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or external exfiltration. Example code for configuration management includes logic for handling
.envfiles and API keys in a standard, safe manner (e.g., placing.envin.gitignore).
Audit Metadata