dask
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external data from various sources (CSV, Parquet, JSON, log files) using parallel computing collections.
- Ingestion points:
dd.read_csv(),db.read_text(), anddd.read_parquet()identified inSKILL.md,references/dataframes.md, andreferences/bags.md. - Boundary markers: No explicit use of boundary markers or instructions to ignore embedded directives in the data are specified.
- Capability inventory: The skill has access to
Bash,Read,Write, andEdittools, which could be leveraged if malicious instructions were successfully injected through processed data. - Sanitization: No specific sanitization or validation logic is detailed for the content of the files being read.
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for well-known data science libraries from official package registries.
- Evidence:
uv pip installcommands fordask,s3fs,gcsfs, andpyarrowinSKILL.md. - [COMMAND_EXECUTION]: Provides instructions for environment setup and connecting to distributed clusters.
- Evidence: Usage of
Clientto connect to remote schedulers and deployment on HPC/Kubernetes clusters described inreferences/schedulers.md.
Audit Metadata