pyfixest
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override system prompts or bypass safety filters were found in any of the skill files.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or instructions for accessing sensitive secret files (like .ssh or .aws/credentials) were detected.
- [DATA_EXFILTRATION]: There are no commands or code patterns that attempt to exfiltrate data to external servers. All network references point to legitimate library documentation or academic sources.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing well-known, standard data science packages (e.g., pyfixest, statsmodels, polars) via standard package managers. No downloads from suspicious or unverified sources were found.
- [REMOTE_CODE_EXECUTION]: The skill does not contain any patterns for downloading and executing remote scripts (like 'curl | bash'). Usage of JIT-compiled backends (numba, JAX) is consistent with high-performance statistical libraries.
- [COMMAND_EXECUTION]: Shell command execution is limited to standard package installation and version checking, with no evidence of malicious command injection.
- [DATA_EXPOSURE]: Data ingestion is limited to local pandas/polars DataFrames provided by the user for regression analysis, representing a standard and expected functional surface.
Audit Metadata