data-source-connector
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script
scripts/introspect_source.pyto automate the discovery of data schemas and relationships. - [EXTERNAL_DOWNLOADS]: The introspection script depends on standard third-party libraries including
pandas,pyarrow, andopenpyxlfrom well-known package registries to process different file formats. - [SAFE]: The core functionality of the skill is to read and process local files (Excel, CSV, Parquet) for metadata extraction based on user-defined paths. No unauthorized file access or data exfiltration patterns were detected.
- [PROMPT_INJECTION]: The skill instructions are focused on data processing and workflow steps without any attempts to override agent safety protocols or bypass system constraints.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, presenting an attack surface for indirect prompt injection.
- Ingestion points: Data is read from local files and remote databases within
scripts/introspect_source.py. - Boundary markers: The skill's output is strictly structured as a
data-model.jsonfile, which mitigates the risk of instructions bleeding into the agent context. - Capability inventory: The introspection script is limited to file reading and metadata extraction; it lacks network access or the ability to execute arbitrary shell commands.
- Sanitization: The script employs a
to_tmdl_namefunction with regular expressions to ensure that all discovered identifiers are sanitized and safe for use in downstream dashboard generation tools.
Audit Metadata