lance
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior, bypass safety filters, or extract system prompts.
- [EXTERNAL_DOWNLOADS]: The skill references standard package installations via
pipforpylanceandlancedb. It correctly directs users to official project documentation and GitHub repositories for the Lance project. - [CREDENTIALS_UNSAFE]: Code examples utilize clearly defined placeholders for API keys and cloud storage credentials (e.g.,
api_key="ldb_..."and***). There are no hardcoded secrets or access attempts to sensitive local file paths like SSH keys or environment files. - [COMMAND_EXECUTION]: The content includes Python code snippets for data operations and standard shell commands for library installation. These are appropriate for the skill's stated purpose of providing expertise on the Lance data format.
- [DATA_EXFILTRATION]: No patterns representing the unauthorized transmission of local or sensitive data to external domains were identified.
- [DYNAMIC_EXECUTION]: The skill does not use runtime code generation,
eval(), or unsafe deserialization of untrusted data.
Audit Metadata