alterlab-qualitative-methods
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The Python analysis script uses nltk.download('stopwords') to fetch linguistic data from the official NLTK repository. This is a standard operation for text processing tasks.
- [COMMAND_EXECUTION]: The skill includes Python code snippets for performing keyword extraction, bigram analysis, and thematic network visualization using libraries like pandas, scikit-learn, and networkx.
- [PROMPT_INJECTION]: The skill processes untrusted external data in the form of qualitative transcripts through Python analysis scripts. 1. Ingestion points: Processes research transcripts loaded from local files (SKILL.md). 2. Boundary markers: Not present for the text processing logic. 3. Capability inventory: Executes local Python code for text metrics and visualization (SKILL.md). 4. Sanitization: No explicit sanitization of transcript content before processing.
Audit Metadata