python-heredoc — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited python-heredoc (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run Python via Bash? Never python -c "..." beyond trivial one-liners. Shell quoting break on f-strings, apostrophes, nested quotes, escape sequences.
uv run python << 'PYTHON_CODE'
import json
data = {"name": "it's working", "value": f"{1 + 2}"}
print(json.dumps(data, indent=2))
PYTHON_CODESingle quotes round 'PYTHON_CODE' block shell var expansion. $variables and backticks stay literal Python.
uv run --with requests python << 'PYTHON_CODE'
import requests
resp = requests.get("https://api.example.com/data")
print(resp.json())
PYTHON_CODEuv run python (not bare python or python3)<< 'PYTHON_CODE' (not << PYTHON_CODE)PYTHON_CODE own line, no leading whitespacepython -c for code with quotes, f-strings, multiple statements~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.