prefect
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and code examples for Prefect, a legitimate data orchestration platform. It promotes secure practices such as using Prefect's native secret storage rather than hardcoding credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by processing user-supplied parameters that are interpolated into file paths and task logic.
- Ingestion points: Flow and task arguments in SKILL.md (e.g., the run_date parameter).
- Boundary markers: None specified in the provided code examples.
- Capability inventory: File system access via Python's pathlib and task execution via the Prefect orchestration engine.
- Sanitization: No explicit sanitization or validation of input parameters is shown in the examples.
Audit Metadata