init-python
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template generator for Python configuration files. It does not perform any network operations, access sensitive files, or execute arbitrary commands.
- [SAFE]: The generated
pyproject.tomlincludes supply-chain hardening via thetool.uv.exclude-newersetting. This is a security best practice that prevents the automatic installation of packages released within the last 7 days, providing time for malicious releases to be identified and removed from registries. - [SAFE]: The skill uses a placeholder for the project name. While this represents an interpolation point for user-provided data, the context is restricted to project metadata generation and does not pose a significant security risk.
Audit Metadata