skills/doccker/cc-use-exp/python-dev/Gen Agent Trust Hub

python-dev

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICAL
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard development tools (black, ruff, pytest, etc.) and libraries (fastapi, sqlalchemy). These are trusted, industry-standard tools for Python development.
  • [COMMAND_EXECUTION] (SAFE): The shell commands listed (e.g., pytest, ruff check) are illustrative examples of how to use standard linters and testing frameworks. They are not intended for hidden or malicious execution.
  • [DATA_EXFILTRATION] (SAFE): The code snippets provided are generic templates for exception handling, logging, and async requests. No sensitive data is targeted for exfiltration.
  • [PROMPT_INJECTION] (SAFE): There are no instructions designed to override agent behavior or bypass safety guardrails.
  • [MALICIOUS_URLS] (SAFE): The scanner alert for 'logger.info' is a false positive. In the context of the skill, it refers to the info method of a Python logging.Logger instance, which is standard functionality.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 06:09 PM