polars
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check-updates.pymaintenance script performs network requests topypi.orgto verify the availability of new library versions. This connection targets a well-known, trusted package registry and is used for maintenance purposes. - [INDIRECT_PROMPT_INJECTION]: The skill documents functionality for ingesting data from external sources including CSV, Parquet, and remote databases. While this represents an attack surface for indirect prompt injection if processing untrusted data, the documentation provides clear guidance on schema enforcement and type validation to mitigate risks. This functionality is essential to the library's primary purpose.
- Ingestion points: Data loading and scanning functions (e.g.,
pl.read_csv,pl.scan_parquet,pl.read_database) detailed inreferences/05-io-operations.md. - Boundary markers: Standard data structure boundaries inherent to DataFrame operations.
- Capability inventory: Local file system read/write access and network connectivity via database and cloud storage connectors.
- Sanitization: Documentation provides instructions for strict typing and schema overrides in
references/03-data-types.md.
Audit Metadata