pre-ship-review
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several reputable static analysis utilities for installation via standard package managers, including Microsoft's Pyright, Semgrep, and other community-trusted tools like Vulture, Griffe, and Deptry. These are documented for their intended use in code quality assurance.\n- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to automate development workflows, such as identifying changed files via git and executing the analysis tool suite. The scripts are transparently documented and include error handling for missing dependencies.\n- [REMOTE_CODE_EXECUTION]: Analysis found no evidence of remote script execution or fetching untrusted payloads. All execution logic is defined within the skill's local reference files and targets the user's local codebase.\n- [DATA_EXFILTRATION]: There are no indicators of sensitive data access or unauthorized network transmission. The skill operates exclusively on the local repository to facilitate code reviews.
Audit Metadata