skills/afelipeg/anthropic-skills-for-enterprise-marketing-os/data-intake-normalizer/Gen Agent Trust Hub
data-intake-normalizer
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a comprehensive data intake and validation pipeline for multiple analytics modules. It follows best practices for data engineering, including encoding detection, fuzzy column mapping, and null imputation strategies.
- [COMMAND_EXECUTION]: The workflow involves executing local Python scripts (
schema_detector.py,column_mapper.py,type_coercer.py,null_handler.py,validation_report.py, andtemplate_generator.py). These operations are confined to the local environment and are necessary for the skill's primary function of data processing. - [DATA_EXPOSURE]: No hardcoded credentials, API keys, or attempts to access sensitive system files (e.g., .ssh, .aws) were found. The skill operates on user-uploaded data within designated directories (
/mnt/user-data/uploads/and/mnt/user-data/outputs/). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user files and interpolates filenames into shell command templates (e.g.,
python scripts/schema_detector.py --file /mnt/user-data/uploads/[filename]). While this represents a theoretical attack surface, the scripts use standard data processing libraries and do not parse executable content from the file data. Sanitization of filenames by the host agent is recommended.
Audit Metadata