analyze-data
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes local data files and user-provided research questions, which serves as a potential surface for indirect instructions.
- Ingestion points: User analytical queries in Step 1 and local files such as
sales.csvin Step 4. - Boundary markers: Includes a mandatory user confirmation step in Step 2 to verify the refined analytical question before execution.
- Capability inventory: Remote task submission, file upload, and background polling via the
astaCLI. - Sanitization: Employs a confirmation loop to ensure the user approves the analysis scope and question.
- [COMMAND_EXECUTION]: The skill executes the
astaCLI tool to manage the lifecycle of data analysis tasks. - Evidence: The skill uses
asta analyze-data submit,asta analyze-data poll, andasta auth loginto interact with the remote analysis environment. - [DATA_EXFILTRATION]: The skill uploads local datasets to a remote service for processing.
- Evidence: The
asta analyze-data submitcommand is designed to upload local files provided by the user to theasta-gatewayworkspace. - [EXTERNAL_DOWNLOADS]: The skill references external resources for documentation and implementation details.
- Evidence: Links to the DataVoyager repository hosted on the allenai GitHub organization and references the A2A specification.
Audit Metadata