vaex
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing large external datasets from local files and S3 buckets, which creates a vulnerability surface for indirect prompt injection if the data contains malicious instructions.\n
- Ingestion points:
vaex.open()andvaex.from_csv()inSKILL.mdare used to load data into the agent's context.\n - Boundary markers: The instructions do not include delimiters or warnings to ignore embedded instructions in the data.\n
- Capability inventory: The skill demonstrates capabilities for reading local/remote files, writing files to the local system (
plt.savefig,convert), and network access via S3.\n - Sanitization: No sanitization or validation of the external data content is described.
Audit Metadata