Find unused Python code before cleanup refactors with Vulture

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard instructions for installing the Vulture package and executing it via the command line (pip install vulture, vulture myscript.py). These commands are essential for the tool's intended purpose of static analysis.
  • [EXTERNAL_DOWNLOADS]: The skill references the official GitHub repository for Vulture (jendrikseipp/vulture) and the PyPI registry. These are well-known and trusted platforms for software distribution.
  • [INDIRECT_PROMPT_INJECTION]: As a static analysis tool that parses Python code, this skill creates a potential surface for indirect prompt injection if the agent blindly follows instructions embedded in source code comments or strings.
  • Ingestion points: User-provided Python source files.
  • Boundary markers: None specified.
  • Capability inventory: Command-line execution of the Vulture analysis tool.
  • Sanitization: No specific input sanitization is detailed in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:15 AM
Security Audit — agent-trust-hub — Find unused Python code before cleanup refactors with Vulture