py-security
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation, security patterns, and educational code examples. No malicious instructions, obfuscation, or data exfiltration patterns were detected.
- [COMMAND_EXECUTION]: The skill documents standard command-line usage for well-known security tools like
banditandruff. These are used for local static analysis and do not pose a security risk in this context. - [EXTERNAL_DOWNLOADS]: Mentions standard, widely-used Python security and utility packages including
bandit,ruff,psycopg2,argon2-cffi, andpython-dotenv. These are well-known libraries in the Python ecosystem. - [DATA_EXPOSURE]: Provides explicit instructions on how to identify and remediate hardcoded secrets, promoting the use of environment variables and
.gitignoreto protect sensitive information.
Audit Metadata