python-refactor

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The file scripts/helpers.py contains functions that use subprocess.run for project maintenance tasks. It executes git status to check the version control state and python -c "import ..." to verify module imports after refactoring. These calls use argument lists and avoid shell execution, which is a secure implementation.
  • [EXTERNAL_DOWNLOADS]: The scripts/update_docs.sh script downloads documentation from the official Rope GitHub repository. This is a well-known service and the resource is fetched from a trusted source for project-related documentation.
  • [REMOTE_CODE_EXECUTION]: The scripts/install_rope.sh script installs the rope library using the standard Python package manager (pip). This is the conventional method for managing legitimate project dependencies.
  • [PROMPT_INJECTION]: The SKILL.md file contains instructions for the agent to prioritize the use of the rope library over string replacements or regular expressions. These are operational constraints intended to ensure refactoring quality and do not attempt to bypass safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 11:02 PM