astropy
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing the astropy package and its dependencies using the uv package manager.
- [EXTERNAL_DOWNLOADS]: The documentation includes examples for fetching astronomical data from remote URLs using astropy.utils.data.download_file and accessing remote FITS files via S3 or HTTP with fsspec integration.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for potentially untrusted data through its core file-reading and remote-data-fetching capabilities. 1. Ingestion points: Data ingestion occurs through astropy.io.fits.open, astropy.table.Table.read, and astropy.utils.data.download_file as shown in references/fits.md and references/tables.md. 2. Boundary markers: No explicit instruction-ignoring delimiters are provided in the data processing examples. 3. Capability inventory: The skill is designed for data analysis, modeling, and visualization; no capabilities for arbitrary command execution or system-level modifications based on ingested data were found. 4. Sanitization: The skill relies on standard Astropy library parsers for structured data formats like FITS and VOTable.
Audit Metadata