quality-run-type-checking
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local type checking tools such as pyright and mypy, and runs a project-specific script ./scripts/check_all.sh to validate the codebase.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of standard Python type stubs and development dependencies from public registries using the uv package manager.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes local source code; however, this is inherent to its primary purpose as a developer tool. Ingestion points: local .py and .toml files via Read and Bash tools. Capability inventory: execution of type checkers and scripts via Bash. Boundary markers and sanitization are not explicitly defined as the tool is intended for local code quality validation.
Audit Metadata