experiment-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV data using a Python script (
scripts/experiment_tracking_diagnostics.py). While the script primarily performs numeric summaries, it constitutes an ingestion point for untrusted data that could influence the agent's diagnostics and implementation memo. - Ingestion points: The
input.csvfile processed byscripts/experiment_tracking_diagnostics.py. - Boundary markers: None detected in the instructions or script.
- Capability inventory: The skill uses
pandasfor CSV reading and numeric summaries, and writes diagnostic results to a JSON file. It also generates a markdown implementation memo. - Sanitization: The script uses
pd.to_numeric(errors='coerce')andpd.to_datetime(errors='coerce'), which provides basic type-safety by discarding non-numeric/non-date strings during the analysis phase.
Audit Metadata