harvard-artifacts-data-pipeline

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implementation aligns with its stated purpose of building a data pipeline for museum artifacts.
  • Core logic focuses on API interaction, data transformation with Pandas, and visualization with Streamlit.
  • [EXTERNAL_DOWNLOADS]: The pipeline interacts with external sources in a standard and transparent manner.
  • Fetches museum artifact metadata from the official Harvard Art Museums API (https://api.harvardartmuseums.org/object).
  • References a public GitHub repository for cloning the application source code.
  • [CREDENTIALS_UNSAFE]: Sensitive information is handled securely using industry best practices.
  • Utilizes environment variable retrieval via os.getenv for the Harvard API key and database credentials.
  • Explicitly instructs the user to store secrets in a .env file rather than hardcoding them.
  • [COMMAND_EXECUTION]: Database interactions are performed using secure methods.
  • Employs parameterized SQL queries with %s placeholders and executemany to prevent SQL injection vulnerabilities.
  • Analytical queries are defined as static, non-interpolated strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 11:34 PM
Security Audit — agent-trust-hub — harvard-artifacts-data-pipeline