statsmodels
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install well-known Python packages (statsmodels, numpy, scipy, pandas, matplotlib, scikit-learn) using the 'uv' package manager. These are standard libraries from official registries and are necessary for the skill's functionality.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill references official documentation domains (statsmodels.org, github.com) and the well-known academic repository (arxiv.org) for fetching citation metadata. No sensitive file access or credential exposure was detected.
- [COMMAND_EXECUTION]: The skill employs standard command-line tools like 'uv' for environment setup and 'rg' (ripgrep) for searching through reference documentation, which is consistent with its stated purpose as a developer tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data for statistical modeling, which theoretically creates an ingestion point for untrusted content. However, the skill provides legitimate analytical workflows and does not automate the processing of external data in a way that bypasses agent safety controls.
- [NO_CODE]: The skill primarily consists of instructional markdown files and code snippets rather than standalone scripts, reducing the risk of hidden malicious logic execution.
Audit Metadata