wasde-ingestor
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's behavior is consistent with its stated purpose of ingesting and normalizing public agricultural data from official sources. The scripts provided are well-documented and follow standard software engineering practices for data validation and handling.
- [EXTERNAL_DOWNLOADS]: The skill fetches monthly WASDE reports and release information from official government and academic domains including usda.gov, nal.usda.gov, and cornell.edu. These are well-known, trusted sources for agricultural statistics.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (PDF and HTML reports). The ingestion point is scripts/fetch_report.py. The risk is mitigated by strict schema validation (us-balance-schema.yaml), numeric extraction logic in scripts/parse_tables.py, and automated balance formula checks in scripts/validate_data.py, which ensure the agent only processes expected numeric data.
Audit Metadata