harvard-artifacts-data-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implementation aligns with its stated purpose of building a data pipeline for museum artifacts.
- Core logic focuses on API interaction, data transformation with Pandas, and visualization with Streamlit.
- [EXTERNAL_DOWNLOADS]: The pipeline interacts with external sources in a standard and transparent manner.
- Fetches museum artifact metadata from the official Harvard Art Museums API (https://api.harvardartmuseums.org/object).
- References a public GitHub repository for cloning the application source code.
- [CREDENTIALS_UNSAFE]: Sensitive information is handled securely using industry best practices.
- Utilizes environment variable retrieval via
os.getenvfor the Harvard API key and database credentials. - Explicitly instructs the user to store secrets in a
.envfile rather than hardcoding them. - [COMMAND_EXECUTION]: Database interactions are performed using secure methods.
- Employs parameterized SQL queries with
%splaceholders andexecutemanyto prevent SQL injection vulnerabilities. - Analytical queries are defined as static, non-interpolated strings.
Audit Metadata