python-data
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill is designed to generate and run Python scripts using the
python3command. This enables the agent to perform complex computations. In this context, the execution is restricted to a sandbox, which is a common pattern for safely running generated code. - External Package Installation: The instructions recommend using
pip installto manage dependencies such aspandas,numpy, andscikit-learn. This allows the skill to extend its capabilities by downloading standard libraries. When using this feature, it is a good practice to ensure the integrity of the packages being installed. - Data Processing Considerations: As the skill processes tables and external datasets, there is an inherent surface for indirect prompt injection. This occurs when instructions are hidden within the data being analyzed. The use of structured output and execution in an isolated sandbox helps mitigate potential risks associated with this data ingestion.
Audit Metadata