order-types-instructions
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script,
scripts/order_types_instructions_diagnostics.py, to calculate slippage and latency metrics. This is a core functional component of the workflow.\n- [PROMPT_INJECTION]: The skill processes external data via CSV files, which constitutes a potential surface for indirect prompt injection.\n - Ingestion points: The script
scripts/order_types_instructions_diagnostics.pyreadsinput.csvusing thepandaslibrary.\n - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the contents of the CSV as untrusted data.\n
- Capability inventory: The skill has the ability to execute local Python scripts and perform file system read/write operations.\n
- Sanitization: The diagnostics script enforces strict data type validation by coercing relevant columns to numeric and datetime formats using
pandas, which effectively prevents the execution of arbitrary text-based instructions embedded in the numeric fields of the data.
Audit Metadata