Skills
Navigate
skills/alterlab-ieu/alterlab-academic-skills/alterlab-zarr/Gen Agent Trust Hub

alterlab-zarr

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process large N-dimensional arrays from external sources such as local files, S3, and GCS.\n
  • Ingestion points: Functions like zarr.open(), zarr.open_array(), xr.open_zarr(), and da.from_zarr() in references/api_reference.md and references/integration.md allow the agent to read data from potentially untrusted stores.\n
  • Boundary markers: No explicit boundary markers or "ignore embedded instructions" warnings are implemented for processed data.\n
  • Capability inventory: The skill utilizes Read, Write, Edit, and Bash tools, providing broad file system and code execution capabilities.\n
  • Sanitization: No data sanitization or validation is performed on the ingested array content before processing.\n- [EXTERNAL_DOWNLOADS]: The skill instructions include the installation of standard Python packages from official registries.\n
  • Details: Commands like uv pip install zarr, s3fs, and gcsfs are documented for setting up the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:36 PM