skills/jeremylongshore/tons-of-skills-marketplace/preprocessing-data-with-automated-pipelines/Gen Agent Trust Hub
preprocessing-data-with-automated-pipelines
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/pipeline.pyscript orchestrates the data pipeline by executing other local scripts (validate_data.py,transform_data.py, andhandle_errors.py) via thesubprocess.runfunction. While arguments are passed as a list to mitigate shell injection, this is the primary mechanism for script execution within the skill environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data files in CSV and JSON formats, which creates an attack surface where malicious instructions embedded in the data could influence the agent's behavior during analysis or code generation. Ingestion points: Data loading and reading operations in
scripts/validate_data.py(lines 61 and 91) andscripts/transform_data.py(line 33). Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the processing logic. Capability inventory: Use ofsubprocess.runinscripts/pipeline.pyandWriteandBashtools as defined inSKILL.md. Sanitization: No content-based sanitization or validation is performed beyond standard data format parsing.
Audit Metadata