py-complexity
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation of well-known Python packages (radon, lizard, xenon, wily) for complexity measurement and tracking. These are standard industry tools.
- [COMMAND_EXECUTION]: Suggested commands involve running static analysis tools on the local codebase to generate metrics. These operations are restricted to measuring code properties and do not involve unsafe shell execution.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to analyze local Python source code which may be untrusted. 1. Ingestion points: Local .py files read by the agent and static analysis tools. 2. Boundary markers: None present. 3. Capability inventory: Execution of local measurement tools via bash. 4. Sanitization: No specific sanitization of code content is performed, though the impact is limited to static analysis results.
Audit Metadata