polars

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/check-updates.py maintenance script performs network requests to pypi.org to verify the availability of new library versions. This connection targets a well-known, trusted package registry and is used for maintenance purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents functionality for ingesting data from external sources including CSV, Parquet, and remote databases. While this represents an attack surface for indirect prompt injection if processing untrusted data, the documentation provides clear guidance on schema enforcement and type validation to mitigate risks. This functionality is essential to the library's primary purpose.
  • Ingestion points: Data loading and scanning functions (e.g., pl.read_csv, pl.scan_parquet, pl.read_database) detailed in references/05-io-operations.md.
  • Boundary markers: Standard data structure boundaries inherent to DataFrame operations.
  • Capability inventory: Local file system read/write access and network connectivity via database and cloud storage connectors.
  • Sanitization: Documentation provides instructions for strict typing and schema overrides in references/03-data-types.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — polars