init-python

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a template generator for Python configuration files. It does not perform any network operations, access sensitive files, or execute arbitrary commands.
  • [SAFE]: The generated pyproject.toml includes supply-chain hardening via the tool.uv.exclude-newer setting. This is a security best practice that prevents the automatic installation of packages released within the last 7 days, providing time for malicious releases to be identified and removed from registries.
  • [SAFE]: The skill uses a placeholder for the project name. While this represents an interpolation point for user-provided data, the context is restricted to project metadata generation and does not pose a significant security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 05:46 AM