python-refactor
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The file
scripts/helpers.pycontains functions that usesubprocess.runfor project maintenance tasks. It executesgit statusto check the version control state andpython -c "import ..."to verify module imports after refactoring. These calls use argument lists and avoid shell execution, which is a secure implementation. - [EXTERNAL_DOWNLOADS]: The
scripts/update_docs.shscript downloads documentation from the official Rope GitHub repository. This is a well-known service and the resource is fetched from a trusted source for project-related documentation. - [REMOTE_CODE_EXECUTION]: The
scripts/install_rope.shscript installs theropelibrary using the standard Python package manager (pip). This is the conventional method for managing legitimate project dependencies. - [PROMPT_INJECTION]: The
SKILL.mdfile contains instructions for the agent to prioritize the use of theropelibrary over string replacements or regular expressions. These are operational constraints intended to ensure refactoring quality and do not attempt to bypass safety filters.
Audit Metadata