dask
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing external datasets (CSV, JSON, Parquet, logs) which constitutes a surface for indirect prompt injection if the processed content is subsequently handled by an LLM without adequate sanitization.\n
- Ingestion points:
dd.read_csv,db.read_text, andda.from_zarrinSKILL.mdand reference files.\n - Boundary markers: Not present in the provided examples.\n
- Capability inventory: Includes distributed task execution and file system writes (
to_parquet,to_csv).\n - Sanitization: No specific sanitization logic is included in the examples.\n- [DYNAMIC_EXECUTION]: Dask fundamentally relies on the dynamic execution of Python functions across partitions or clusters.\n
- Evidence: Use of
client.submit,map_partitions, andmap_blocksthroughout the reference documentation (e.g.,references/futures.md,references/dataframes.md).\n - Note: This behavior is consistent with the library's primary purpose for parallel and distributed computing and is presented here in an educational context.
Audit Metadata