python3-development
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate development documentation, reference material, and project configuration boilerplate assets.
- [COMMAND_EXECUTION]: The provided
assets/hatch_build.pyfile includes logic to execute local build scripts (scripts/build-binaries.shorscripts/build-binaries.py) as part of the project packaging process. This is a standard capability for custom build hooks and follows best practices by using argument lists and avoiding shell invocation. - Evidence:
subprocess.run([bash_path, str(script_path)], ...)inassets/hatch_build.py. - [EXTERNAL_DOWNLOADS]: The documentation references various trusted tools and package registries, such as PyPI and official GitHub repositories for popular Python libraries. All referenced external resources are well-known and legitimate services.
- Evidence: Mentions of
astral.sh,peps.python.org,docs.python.org, and documentation links for over 50 popular Python modules.
Audit Metadata