python-pep8-coach

Pass

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes flake8 and black CLI commands on user-specified Python files to perform style analysis and formatting.
  • [EXTERNAL_DOWNLOADS]: The skill offers to install the flake8 and black packages from the official Python Package Index (PyPI) using pip if they are not already installed. This occurs only with explicit user permission.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads and processes external Python source code. \n
  • Ingestion points: Python source files located at the target path specified by the user. \n
  • Boundary markers: Absent; no delimiters are used to separate analyzed code from agent instructions. \n
  • Capability inventory: Execution of shell commands, package installation via pip, and filesystem write access. \n
  • Sanitization: No content filtering or instruction-stripping is performed on the analyzed source code before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 26, 2026, 05:08 PM