Skills
skills/aradotso/data-skills/harvard-artifacts-data-engineering-streamlit/Gen Agent Trust Hub

harvard-artifacts-data-engineering-streamlit

Warn

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The build_custom_query helper function in the 'Common Patterns' section constructs SQL statements using manual string concatenation: conditions = " AND ".join([f"{k}='{v}'" for k, v in filters.items()]). This pattern allows for SQL injection if the filters dictionary contains data from untrusted sources.
  • [EXTERNAL_DOWNLOADS]: The skill is designed to fetch museum artifact metadata from the Harvard Art Museums' official API (api.harvardartmuseums.org). This is a well-known service and the operation is central to the skill's stated purpose.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 06:03 AM
Security Audit — agent-trust-hub — harvard-artifacts-data-engineering-streamlit