ty

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or unauthorized persistence mechanisms were detected.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute ty check commands via uv or uvx. These are standard operations for code linting and type checking within the Python ecosystem.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation hosted at https://docs.astral.sh/ty/. Since 'astral-sh' is a recognized technology vendor, this reference is treated as safe and informative.
  • [PROMPT_INJECTION]: Potential indirect injection surface was evaluated.
  • Ingestion points: The skill processes Python source files (.py, .pyi) and configuration files (pyproject.toml, ty.toml) in the workspace.
  • Boundary markers: No explicit delimiters or boundary instructions are provided.
  • Capability inventory: The skill executes ty as a subprocess for code analysis.
  • Sanitization: No sanitization is mentioned; the tool is assumed to perform its own parsing of code as a static analyzer.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 08:55 PM