python-data

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill is designed to generate and run Python scripts using the python3 command. This enables the agent to perform complex computations. In this context, the execution is restricted to a sandbox, which is a common pattern for safely running generated code.
  • External Package Installation: The instructions recommend using pip install to manage dependencies such as pandas, numpy, and scikit-learn. This allows the skill to extend its capabilities by downloading standard libraries. When using this feature, it is a good practice to ensure the integrity of the packages being installed.
  • Data Processing Considerations: As the skill processes tables and external datasets, there is an inherent surface for indirect prompt injection. This occurs when instructions are hidden within the data being analyzed. The use of structured output and execution in an isolated sandbox helps mitigate potential risks associated with this data ingestion.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 06:45 AM
Security Audit — agent-trust-hub — python-data