lint-and-validate
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/lint_runner.pyscript executes system commands for linting and type checking (e.g.,npm,npx,ruff,mypy). It usessubprocess.runwith list-based arguments and no shell, which is a secure practice to prevent command injection. - [COMMAND_EXECUTION]: The skill facilitates the execution of project-defined scripts such as
npm run lint. While this executes code from the project being analyzed, it is the standard and expected behavior for a linting utility. - [SAFE]: The
scripts/type_coverage.pyscript performs static analysis by reading and parsing file content with regular expressions without executing the files, ensuring a safe analysis process.
Audit Metadata