analytics-python

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the official couchbase Python package (version 4.0 or higher). This is a well-known, standard SDK provided by the vendor for database connectivity.
  • [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. Data handling is limited to standard database operations within the Couchbase environment.
  • [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior, bypass safety guidelines, or extract system prompts.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from database queries (e.g., in the 'Writing Results Back' section). While this represents a data ingestion surface, the operations are standard for a database tool and do not include unsafe interpolation or execution of untrusted data.
  • Ingestion points: Query results processed via result.rows() and for row in result loops in SKILL.md and examples/examples.md.
  • Boundary markers: Not present for the query data itself, which is typical for SDK documentation.
  • Capability inventory: Data is used for local printing (print) and database writes (collection.upsert).
  • Sanitization: Standard Python string formatting is used for document keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 09:28 AM
Security Audit — agent-trust-hub — analytics-python