di-agent-flow-pyflow
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a restricted Python DSL (Pyflow) for data integration tasks, which enforces security by explicitly prohibiting standard Python imports and
print()statements. - [SAFE]: Data access and movement are managed through a symbol-binding mechanism (q.source, q.write) that is resolved by the host environment, preventing unauthorized file system or network access.
- [SAFE]: The DSL operations are limited to abstract data transformations (filter, join, aggregate), which minimizes the risk of arbitrary command execution or privilege escalation.
- [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found in the specification or provided examples.
Audit Metadata