flake8-to-ruff
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local discovery commands via
findto identify configuration files and employsuvandpre-committo manage project dependencies. These operations are restricted to relevant project maintenance tasks and do not involve arbitrary command execution of untrusted input.\n- [EXTERNAL_DOWNLOADS]: The migration process configures the project to use the official Ruff pre-commit hook from Astral's GitHub repository. This is a reference to a well-known technology provider's official source, which is standard practice for this workflow.\n- [SAFE]: The dynamic context injection pattern used for file discovery (detectingpyproject.toml,.flake8, etc.) is benign and serves only to inform the agent about the project environment for the migration task.
Audit Metadata