ai-data-analyst
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a 'Verification' section that provides standard shell commands for setting up a Python virtual environment, installing dependencies via pip, and executing the generated analysis script locally. This is consistent with the skill's purpose as a local data analysis tool.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external datasets (CSV, Excel, JSON). This creates an attack surface where malicious instructions could be embedded in data files. However, the skill emphasizes data exploration, quality validation, and self-contained code generation, which are standard practices that mitigate the risk of the agent following instructions contained within the data rather than the skill itself.
Audit Metadata