atb-csv-tester
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform environment setup and execute testing logic. Specifically,scripts/run-csv-tests.shdynamically assembles shell commands and executes them within Docker containers usingdocker exec. This involves sourcing environment scripts and callingatb_csv_ops_test.pywith user-supplied paths.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external CSV files to validate operator correctness. This creates a surface where instructions embedded in the test data could potentially influence the agent's summary or subsequent actions.\n - Ingestion points: Test data is read from CSV files specified by the user or located via
findcommands as documented inSKILL.mdand the runner script.\n - Boundary markers: There are no explicit delimiters or instructions to the agent to ignore potential commands within the CSV content when generating reports or summaries.\n
- Capability inventory: The skill possesses capabilities including filesystem access (
Read,Write) and shell execution (Bash).\n - Sanitization: While the
run-csv-tests.shscript validates the CSV structure (pipe delimiters and column counts), it does not perform semantic sanitization of the data fields before the agent processes the results.
Audit Metadata