ds
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/check.shentry point executes a local Python runner (ds-dq.py) and project-specific test or lint commands defined within the data science plan. These commands are restricted to the local environment and intended for project validation. - [DYNAMIC_CONTEXT_INJECTION]:
SKILL.mdcontains dynamic context placeholders using the!command`` syntax. These are used to execute utility scripts likeskill-tocandload-constraintsfrom the platform's plugin root to dynamically populate the skill documentation with a Table of Contents and constraint index at load time. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data during the profiling and planning phases, which is used to populate a
## Data Outputstable. This table is subsequently parsed byscripts/ds-dq.py. The skill implements structural boundaries by requiring a human-review phase and using a specificds-revieweragent to judge findings. - [DYNAMIC_EXECUTION]: The test suite
scripts/ds_dq_test.pyuses thesubprocessmodule to execute theds-dq.pyscript against fixtures to verify that data quality checks correctly identify failures and passes.
Audit Metadata