senior-data-engineer
Warn
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/pipeline_orchestrator.pyutilizes thecompile()function within thevalidatemethods of theAirflowGenerator,PrefectGenerator, andDagsterGeneratorclasses. This function is used to perform syntax checks on generated pipeline code strings at runtime, which is a form of dynamic execution. - [INDIRECT_PROMPT_INJECTION]: The skill defines tools like
scripts/data_quality_validator.pyandscripts/etl_performance_optimizer.pythat ingest data from external files (CSV, JSON, JSONL, SQL). - Ingestion points: The
DataLoader.loadmethod inscripts/data_quality_validator.pyand file-reading arguments inscripts/etl_performance_optimizer.pyare the primary points where untrusted data enters the agent context. - Boundary markers: The scripts do not implement specific delimiters or 'ignore' instructions for the data being processed.
- Capability inventory: The skill includes capabilities to write files to the local system through
scripts/pipeline_orchestrator.pyand perform statistical analysis on local data. - Sanitization: While the scripts perform type and schema validation, they lack sanitization against instructions embedded within the data that might influence agent behavior.
Audit Metadata