alterlab-datacommons
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and setup instructions specify the installation of the
datacommons-clientPython package, which is the official library for accessing Google Data Commons data. It also referencespandasfor data manipulation. These are standard packages from established registries.- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest statistical and demographic data from the Data Commons API into the agent's context. This represents a potential indirect prompt injection surface common to all data-retrieval skills. - Ingestion points: Data is retrieved from the
api.datacommons.orgendpoint through theDataCommonsClientmethods or thescripts/query_datacommons.pyhelper script. - Boundary markers: The instructions do not define specific delimiters for separating external data from agent instructions, though the use of Pandas DataFrames provides a structured format.
- Capability inventory: The skill allows network access to the Data Commons API and the execution of Python scripts for data analysis.
- Sanitization: The skill uses standard JSON parsing and Pandas conversion, but does not explicitly filter the content of the statistical observations for potential prompt injection patterns.
Audit Metadata