csv-to-sif

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash and process.run to perform file conversion tasks. This is restricted to local processing and is consistent with the skill's stated purpose of native file conversion.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes external CSV files.
  • Ingestion points: The skill reads user-supplied CSV files and external vendor specifications (SKILL.md, host-contract.json).
  • Boundary markers: The instructions mandate strict validation of record membership and explicit comparison between accepted inputs and generated outputs to ensure integrity (SKILL.md).
  • Capability inventory: The agent is authorized to use Bash, Write, and Edit tools to generate the output files.
  • Sanitization: The skill requires verifying encoding, escaping, and line endings for all generated records to prevent injection or corruption during the conversion process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 01:03 PM