green-power-direct-connection
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a professional utility for creating renewable energy project reports. It includes markdown templates for report structures and Python scripts for technical data analysis and chart generation.
- [EXTERNAL_DOWNLOADS]: The script
fetch_nasa_power.pyis designed to download climate and radiation data from NASA's official POWER API (https://power.larc.nasa.gov). This uses a well-known scientific service for its intended purpose and does not pose a security threat. - [INDIRECT_PROMPT_INJECTION]: The skill's scripts (
prepare_hourly.py,make_figures.py,make_site_map.py) ingest external data provided by the user in Excel, CSV, and KML formats. The processing is limited to numerical computation and plotting using standard libraries (pandas, matplotlib, numpy). There are no high-risk capabilities like arbitrary command execution or network exfiltration that could be triggered by malicious data payloads.
Audit Metadata