improving-python-code-quality
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and refactor external Python library code, which serves as an ingestion point for untrusted data that could contain hidden instructions.
- Ingestion points: Python source files provided for review, linting, and refactoring (SKILL.md).
- Boundary markers: No explicit instructions are provided to the agent to distinguish between code logic and potential natural language instructions embedded in comments or strings.
- Capability inventory: The skill utilizes shell commands including ruff, mypy, grep, and uv to analyze and manage the codebase (SKILL.md, RUFF_CONFIG.md, MYPY_CONFIG.md).
- Sanitization: No sanitization or filtering of the input code is specified before processing.
- [COMMAND_EXECUTION]: The instructions involve executing local development tools and shell utilities for code analysis and dependency management.
- Evidence: Use of ruff, mypy, uv, and grep to perform linting, type checking, and duplicate definition detection (SKILL.md, MYPY_CONFIG.md, RUFF_CONFIG.md).
Audit Metadata