neurokit2
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the NeuroKit2 library (version 0.2.13) and its associated scientific stack (NumPy, SciPy, pandas, etc.) from the official Python Package Index (PyPI). It also references procedures for fetching citation metadata from ArXiv and scientific templates from the MNE-Python ecosystem, which are established, well-known platforms for academic research.
- [INDIRECT_PROMPT_INJECTION]: The skill ingest physiological time-series data from external CSV and JSON files for preprocessing and analysis. While the included scripts implement rigorous structural validation—including strict numeric type conversion, range checks, and the rejection of non-standard JSON constants—the resulting statistical summaries represent a surface for indirect prompt injection. These risks are effectively mitigated by the skill's defensive parsing and de-identification requirements.
Audit Metadata