linter-autofix

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard linter and formatter commands such as ruff, eslint, biome, cargo, and go via a helper script. These are routine development tools.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes npx to run JavaScript linters, which may fetch packages from the official npm registry if they are not cached. These are well-known and trusted sources.\n- [REMOTE_CODE_EXECUTION]: The detect-and-fix.sh script uses eval to run hardcoded command strings for detected linters. This is a common pattern for automating multiple tools within a single script.\n- [PROMPT_INJECTION]: The skill has an indirect injection surface as it determines behavior based on the presence and content of local configuration files.\n
  • Ingestion points: Inspects local file names and greps pyproject.toml in scripts/detect-and-fix.sh.\n
  • Boundary markers: None (typical for this tool category).\n
  • Capability inventory: Uses Bash to execute commands and Edit to modify files.\n
  • Sanitization: None identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 05:58 PM