analyze-data

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes local data files and user-provided research questions, which serves as a potential surface for indirect instructions.
  • Ingestion points: User analytical queries in Step 1 and local files such as sales.csv in Step 4.
  • Boundary markers: Includes a mandatory user confirmation step in Step 2 to verify the refined analytical question before execution.
  • Capability inventory: Remote task submission, file upload, and background polling via the asta CLI.
  • Sanitization: Employs a confirmation loop to ensure the user approves the analysis scope and question.
  • [COMMAND_EXECUTION]: The skill executes the asta CLI tool to manage the lifecycle of data analysis tasks.
  • Evidence: The skill uses asta analyze-data submit, asta analyze-data poll, and asta auth login to interact with the remote analysis environment.
  • [DATA_EXFILTRATION]: The skill uploads local datasets to a remote service for processing.
  • Evidence: The asta analyze-data submit command is designed to upload local files provided by the user to the asta-gateway workspace.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources for documentation and implementation details.
  • Evidence: Links to the DataVoyager repository hosted on the allenai GitHub organization and references the A2A specification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 03:34 AM