black-to-ruff-format
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs expected developer operations for project migration without any detected malicious patterns.
- [COMMAND_EXECUTION]: Uses standard shell commands including
find,uvx, andpre-committo detect configuration files, manage dependencies, and verify formatting. These operations are limited to the local project directory and align with the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: Instructs the agent to configure the project's pre-commit settings to pull from the official Ruff repository on GitHub (
astral-sh/ruff-pre-commit). This is a well-known service repository used extensively in the Python ecosystem. - [DATA_EXFILTRATION]: No data exposure or exfiltration patterns were detected. The skill does not attempt to read sensitive files or send data to untrusted external destinations.
- [PROMPT_INJECTION]: The instructions focus entirely on project migration logic and do not contain any attempts to bypass safety filters, override core agent behavior, or extract system prompts.
- [DYNAMIC_CONTEXT_INJECTION]: Employs the
!commandsyntax to check for the existence of project configuration files at load time. These commands are benignfindoperations used for environmental discovery.
Audit Metadata