holistic-linting-resolver

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements structured procedures for resolving code quality issues without introducing security risks.- [EXTERNAL_DOWNLOADS]: Fetches documentation from the official Basedpyright documentation site (docs.basedpyright.com). This is a well-known service used for legitimate documentation retrieval.- [COMMAND_EXECUTION]: Executes standard development utilities such as uv, ruff, mypy, pyright, and rg (ripgrep) for local code analysis and verification. These operations are limited to the local environment and intended for code linting.- [PROMPT_INJECTION]: Evaluated for indirect prompt injection risks associated with processing external data. Although this is a vulnerability surface, the context is limited to developer tools and documentation.
  • Ingestion points: Linter diagnostic outputs and external documentation fetched via WebFetch or read from local paths like ./references/mypy-docs/.
  • Boundary markers: None explicitly defined for the external documentation content.
  • Capability inventory: Shell command execution (uv run, rg, grep, python -c) and file system read access (Read).
  • Sanitization: No specific sanitization or validation of the fetched documentation or linter output is described before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 08:41 AM