setting-up-python-libraries
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script
scripts/create_project.pydesigned to automate the creation of project structures. Analysis confirms the script performs standard local file and directory operations (usingpathlib) and does not involve arbitrary command execution, network access, or sensitive data harvesting. - [EXTERNAL_DOWNLOADS]: The CI/CD configurations (
CI.md) and project templates reference well-known and reputable third-party resources, including official GitHub Actions (actions/checkout,actions/setup-python), tools from established organizations (Astral'suv,codecov/codecov-action), and standard packages from PyPI. These are standard industry practices. - [SAFE]: The skill incorporates security-focused development tools like
bandit(static analysis) andpip-audit(dependency scanning) into its Makefile and documentation, demonstrating a posture consistent with high-quality, secure software development.
Audit Metadata