data-transformation
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and transform untrusted structured data (JSON, YAML, CSV, XML, etc.) from external files.
- Ingestion points: The skill reads data from various files using
catand pipes it to thedaselutility as shown inSKILL.mdandreferences/transformation-patterns.md. - Boundary markers: There are no explicit instructions to the agent to treat data inside these files as untrusted or to ignore any embedded instructions that might be contained within values.
- Capability inventory: The skill uses
daselfor transformation and shell redirection (>) andmvfor file writing. It does not perform network operations or execute arbitrary scripts. - Sanitization: The skill does not implement or describe sanitization techniques for the data being processed, relying on
daselfor structure parsing.
Audit Metadata