configure-formatting

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses dynamic context injection (!command) to detect the presence of configuration files (e.g., biome.json, pyproject.toml) and project types at load time. These commands are restricted to find and grep for environment discovery and do not incorporate unvalidated user input.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard development tools and formatters using official package managers (npm, uv, cargo). It also references official pre-commit hook repositories from well-known organizations such as Biome and Astral Sh.
  • [DATA_EXFILTRATION]: While the skill uses WebSearch and WebFetch, these tools are directed toward official documentation and registry sites (e.g., biomejs.dev, npmjs.com, astral.sh) solely for the purpose of checking the latest versions of formatting tools.
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file utilizes the ! pattern to execute shell commands during the skill loading phase. These operations are limited to project introspection (checking for config files) and do not involve sensitive file paths or network exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 01:17 AM