harvard-artifacts-collection-etl-analytics

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone a repository from GitHub (https://github.com/Manali0711/Harvard-Artifacts-Collection-Data-Engineering-Analytics-App.git) and download packages from standard registries (PyPI). These are standard developer operations and target public project repositories.
  • [COMMAND_EXECUTION]: Includes standard shell commands for environment setup such as git clone, pip install, and streamlit run. These commands are expected for the described data engineering workflow.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to use a .env file for managing sensitive information like API keys and database credentials. It uses placeholders (your_api_key_here, your_db_password) instead of hardcoding any real secrets.
  • [DATA_EXFILTRATION]: While the skill performs network requests and database operations, these are directed to the official Harvard Art Museums API and the user's own local/configured database, as specified by the primary function of the ETL pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 12:04 AM
Security Audit — agent-trust-hub — harvard-artifacts-collection-etl-analytics