typer-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [PRIVILEGE_ESCALATION]: The
scripts/generate-cli.shscript applies executable permissions (chmod +x) to generated Python files, which is standard behavior for scripts creating command-line tools. - [DYNAMIC_EXECUTION]: The
scripts/test-cli.shutility performs an import check by executing the content of a target Python file up to the main guard using theexec()function. This is a utility pattern for verifying that all dependencies in the CLI application are correctly installed. - [INDIRECT_PROMPT_INJECTION]: CLI templates (e.g.,
templates/basic-typed-command.py) and examples include logic to read local files viaPath.read_text(), representing a standard ingestion surface for file-processing tools. - Ingestion points:
input_file.read_text()in CLI templates and examples. - Boundary markers: None present for the processed file content.
- Capability inventory: File system read/write operations via
Pathand terminal output viatyper. - Sanitization: Content is processed but not explicitly sanitized for embedded instructions.
Audit Metadata