vaex
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process large tabular datasets from external sources, which constitutes a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill loads data from local files (CSV, HDF5, Parquet) and remote cloud storage (S3, GCS, Azure) using functions like
vaex.open()andvaex.from_csv(), as described inreferences/core_dataframes.mdandreferences/io_operations.md. - Boundary markers: No specific delimiters or instructions for the agent to treat data content as untrusted are documented.
- Capability inventory: The skill possesses file writing capabilities (e.g.,
export_hdf5), cloud network access, and mentions running thevaex-serverutility. - Sanitization: The provided references do not include methods for sanitizing external data to prevent it from containing malicious instructions.
- [DYNAMIC_EXECUTION]: The skill supports the use of Numba JIT compilation (
@numba.jit) for custom performance optimizations and integrates with machine learning frameworks like TensorFlow and Keras, which involve runtime model execution, as documented inreferences/performance.mdandreferences/machine_learning.md.
Audit Metadata