stat-eda
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill framework is designed to ingest and analyze datasets provided by external users, which presents a surface for indirect prompt injection.
- Ingestion points: The workflow in
SKILL.mdandexamples/sample_scenario.mdinvolves processing user-supplied CSV or tabular data. - Boundary markers: There are no explicit boundary delimiters defined to separate raw data values from the agent's internal instruction context.
- Capability inventory: The skill utilizes standard statistical and data manipulation capabilities via
pandas,numpy, andscikit-learnas described inreferences/missing-data.md. - Sanitization: The instructions do not specify a requirement to sanitize or filter data content before the agent performs analysis.
Audit Metadata