python-json-parsing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely educational and focuses on industry-standard best practices for data processing.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill provides installation commands for well-known, established Python packages (orjson, msgspec, ujson, jsonpath-ng, jmespath, ijson, jsonschema) which is standard for technical documentation.
- [DYNAMIC_EXECUTION]: The skill explicitly warns against the use of eval() for JSON parsing, highlighting it as a security risk and providing safe alternatives using the standard library's json.loads().
- [PROMPT_INJECTION]: No prompt injection patterns, bypass markers, or instruction override attempts were identified in the metadata or body content.
- [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network operations was found. Code examples use local file operations and standard data processing patterns.
Audit Metadata