vaex
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install
vaexand its sub-packages (vaex-core,vaex-viz,vaex-hdf5,vaex-ml) usinguv pipfrom PyPI, an established package registry. - [EXTERNAL_DOWNLOADS]: Documents optional cloud storage support requiring standard libraries such as
s3fs,gcsfs, andadlfsfrom well-known providers (AWS, Google Cloud, Azure). - [EXTERNAL_DOWNLOADS]: Includes examples for integrating standard scientific computing and machine learning libraries including
pandas,numpy,scikit-learn,xgboost,lightgbm,catboost,tensorflow,keras,numba,sqlalchemy,matplotlib,seaborn, andplotly. - [COMMAND_EXECUTION]: Provides legitimate commands for package installation and for starting a
vaex-serverto enable remote data access, which are documented features of the library. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process large datasets from various file formats (CSV, HDF5, Arrow, Parquet). While this constitutes a data ingestion surface, it is the primary intended purpose of the tool and no malicious instructions were detected.
- Ingestion points: Data loading via
vaex.open(),vaex.from_csv(), and cloud storage paths inSKILL.mdandreferences/io_operations.md. - Boundary markers: None explicitly defined in the prompts, as the skill focuses on code library usage.
- Capability inventory: File reading and writing (
export_hdf5), bash execution for installation, network access for cloud storage and web sockets, and dynamic execution via Numba JIT compilation. - Sanitization: Standard library handling of data formats; the agent is expected to follow secure coding practices when processing untrusted files.
Audit Metadata