data-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses python3 scripts/analyze_csv.py <file.csv> to process data. This is a standard and safe method for delegating deterministic calculations to a script within the skill's own environment.
  • [NO_CODE_ISSUES]: The provided Python script scripts/analyze_csv.py uses only standard libraries (csv, json, math, sys, collections, pathlib) and performs local file reading with no network operations or external dependencies.
  • [REMOTE_CODE_EXECUTION]: No remote code execution or package installation patterns were detected. The skill operates entirely on local files.
  • [DATA_EXFILTRATION]: No network calls or exfiltration patterns were found. The skill processes local data and returns results to the agent context.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes CSV files, which is an ingestion point for untrusted data. However, the use of a deterministic Python script for statistics and anomaly detection provides a robust layer of sanitization, and the prompt instructions include clear boundaries for usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 11:05 AM
Security Audit — agent-trust-hub — data-analysis