alterlab-dask
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data sources which could contain malicious instructions designed to influence the agent. 1. Ingestion points: Data is loaded via
dd.read_csv,db.read_text, andda.from_zarras described inSKILL.mdandreferences/dataframes.md. 2. Boundary markers: No explicit prompt boundaries or instructions to ignore data-embedded commands are provided. 3. Capability inventory: The skill has access toBash(python:*),Bash(uv:*), and fileWrite/Edittools, which are high-capability. 4. Sanitization: No content-level sanitization for the processed datasets is mentioned. - [COMMAND_EXECUTION]: The skill utilizes
Bashtools to execute Python-based Dask workflows and manage clusters, which is standard for its intended purpose.
Audit Metadata