carto-gwr
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external datasets, creating a surface where malicious instructions could be introduced via the data being analyzed.
- Ingestion points: Data is ingested into the workflow context through the
native.gettablebynametool as described in Step 1 ofSKILL.md. - Boundary markers: The instructions do not provide explicit delimiters or instructions for the agent to ignore potentially malicious content embedded within the source data.
- Capability inventory: The skill encompasses capabilities for data ingestion (
native.gettablebyname), data filtering (native.wheresimplified), spatial regression calculations (native.gwr), and database persistence (native.saveastable) as outlined inSKILL.md. - Sanitization: There is no mention of data validation, escaping, or sanitization processes for the values extracted from the source tables.
Audit Metadata