data-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3 scripts/analyze_csv.py <file.csv>to process data. This is a standard and safe method for delegating deterministic calculations to a script within the skill's own environment. - [NO_CODE_ISSUES]: The provided Python script
scripts/analyze_csv.pyuses only standard libraries (csv,json,math,sys,collections,pathlib) and performs local file reading with no network operations or external dependencies. - [REMOTE_CODE_EXECUTION]: No remote code execution or package installation patterns were detected. The skill operates entirely on local files.
- [DATA_EXFILTRATION]: No network calls or exfiltration patterns were found. The skill processes local data and returns results to the agent context.
- [INDIRECT_PROMPT_INJECTION]: The skill processes CSV files, which is an ingestion point for untrusted data. However, the use of a deterministic Python script for statistics and anomaly detection provides a robust layer of sanitization, and the prompt instructions include clear boundaries for usage.
Audit Metadata