wps

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute flake8 with specific style guide flags on repository files. This is a standard local operation for code quality enforcement.
  • [EXTERNAL_DOWNLOADS]: The instructions reference the wemake-python-styleguide package. This is a legitimate tool authored by wemake-services, matching the skill's vendor context.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes Python code from the repository, creating an attack surface for instructions hidden in code comments. Ingestion points: Files read during flake8 execution. Boundary markers: None specified in the prompt template. Capability inventory: The agent can modify local files and execute shell commands. Sanitization: No specific content filtering is implemented for the processed source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 01:29 PM
Security Audit — agent-trust-hub — wps