python-code-quality

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and recommends downloading standard Python development tools including ruff, pyright, and pre-commit from official package registries (PyPI and NPM).
  • [EXTERNAL_DOWNLOADS]: Pre-commit configuration templates in patterns/pre-commit-integration.md reference the official repository for Ruff (github.com/astral-sh/ruff-pre-commit) and a well-known Pyright mirror.
  • [COMMAND_EXECUTION]: The helper scripts tools/python_formatter.py and tools/python_ruff_checker.py use the subprocess module to execute the ruff CLI tool. These commands are invoked using list-based arguments without a shell, which prevents command injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 06:12 PM