csv-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external CSV files, which is a common vector for indirect prompt injection attacks.
- Ingestion points: External CSV data processed during analysis and transformation tasks described in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions to treat data as untrusted.
- Capability inventory: The skill utilizes Python and Pandas for data manipulation and analysis.
- Sanitization: The guidelines include a recommendation to 'Always validate inputs before processing,' which serves as a defensive measure.
- [METADATA_POISONING]: The
authorfield in the skill's YAML frontmatter ('Claude Code') is inconsistent with the primary vendor context ('inbharatai') found in the documentation links. - [EXTERNAL_DOWNLOADS]: The skill includes a reference to a repository within the 'inbharatai' GitHub organization.
- Evidence: Link to
https://github.com/inbharatai/claude-skillsfound in the footer of SKILL.md.
Audit Metadata