python-pep8-coach
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
flake8andblackCLI commands on user-specified Python files to perform style analysis and formatting. - [EXTERNAL_DOWNLOADS]: The skill offers to install the
flake8andblackpackages from the official Python Package Index (PyPI) usingpipif they are not already installed. This occurs only with explicit user permission. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads and processes external Python source code. \n
- Ingestion points: Python source files located at the target path specified by the user. \n
- Boundary markers: Absent; no delimiters are used to separate analyzed code from agent instructions. \n
- Capability inventory: Execution of shell commands, package installation via
pip, and filesystem write access. \n - Sanitization: No content filtering or instruction-stripping is performed on the analyzed source code before it is processed by the agent.
Audit Metadata