seaborn
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate processing untrusted data which presents a surface for indirect prompt injection.
- Ingestion points: The skill provides examples for loading external data files using
pd.read_csv()inreferences/examples.md. - Boundary markers: There are no explicit delimiters or instructions provided to separate data from instructions.
- Capability inventory: The skill uses
Bash,Read,Write, andEdittools as defined in theallowed-toolssection ofSKILL.md. - Sanitization: No data validation or sanitization routines are implemented for external inputs.
- [EXTERNAL_DOWNLOADS]: The skill performs expected downloads from well-known and trusted sources.
- Fetches the
seabornlibrary and itsstatsextra from the official package registry. - Downloads sample datasets from the official Seaborn repository on GitHub via
sns.load_dataset().
Audit Metadata