configure-formatting
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection (
!command) to detect the presence of configuration files (e.g.,biome.json,pyproject.toml) and project types at load time. These commands are restricted tofindandgrepfor environment discovery and do not incorporate unvalidated user input. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard development tools and formatters using official package managers (npm, uv, cargo). It also references official pre-commit hook repositories from well-known organizations such as Biome and Astral Sh.
- [DATA_EXFILTRATION]: While the skill uses
WebSearchandWebFetch, these tools are directed toward official documentation and registry sites (e.g., biomejs.dev, npmjs.com, astral.sh) solely for the purpose of checking the latest versions of formatting tools. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile utilizes the!pattern to execute shell commands during the skill loading phase. These operations are limited to project introspection (checking for config files) and do not involve sensitive file paths or network exfiltration.
Audit Metadata