astropy-fundamentals
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation command in metadata.json downloads the skill markdown from a public GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill provides code patterns for reading external astronomical data files (FITS, catalogs), which serves as a potential surface for indirect prompt injection. 1. Ingestion points: Functions such as fits.open and Table.read in SKILL.md. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded content were found. 3. Capability inventory: The skill has access to Bash, Write, and Edit tools as defined in the frontmatter. 4. Sanitization: Processing relies on the standard Astropy library parsing mechanisms.
Audit Metadata