wps
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
flake8with specific style guide flags on repository files. This is a standard local operation for code quality enforcement. - [EXTERNAL_DOWNLOADS]: The instructions reference the
wemake-python-styleguidepackage. This is a legitimate tool authored bywemake-services, matching the skill's vendor context. - [INDIRECT_PROMPT_INJECTION]: The skill processes Python code from the repository, creating an attack surface for instructions hidden in code comments. Ingestion points: Files read during
flake8execution. Boundary markers: None specified in the prompt template. Capability inventory: The agent can modify local files and execute shell commands. Sanitization: No specific content filtering is implemented for the processed source code.
Audit Metadata