python-code-quality
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and recommends downloading standard Python development tools including
ruff,pyright, andpre-commitfrom official package registries (PyPI and NPM). - [EXTERNAL_DOWNLOADS]: Pre-commit configuration templates in
patterns/pre-commit-integration.mdreference the official repository for Ruff (github.com/astral-sh/ruff-pre-commit) and a well-known Pyright mirror. - [COMMAND_EXECUTION]: The helper scripts
tools/python_formatter.pyandtools/python_ruff_checker.pyuse thesubprocessmodule to execute theruffCLI tool. These commands are invoked using list-based arguments without a shell, which prevents command injection vulnerabilities.
Audit Metadata