statistical-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions facilitate the installation of common, well-known statistical and data visualization libraries including
pingouin,scipy,statsmodels,pandas,matplotlib,seaborn,pymc, andarvizvia theuvpackage manager. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external datasets (e.g., experimental or survey data), creating a theoretical attack surface for indirect prompt injection.
- Ingestion points: Data processed from user-provided files within the analysis workflow and
scripts/assumption_checks.py. - Boundary markers: The skill defines a structured workflow for analysis but does not specify delimiters to separate untrusted data content from agent instructions.
- Capability inventory: The skill possesses capabilities for complex statistical modeling and data visualization. It does not include dangerous capabilities such as arbitrary command execution, unauthorized file system modification, or network exfiltration.
- Sanitization: The associated scripts perform data cleaning for statistical validity (e.g., handling missing values) but do not implement sanitization filters to detect or neutralize instructions embedded within data fields.
Audit Metadata