datalad
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install
dataladandgit-annexviauv pip install. Thegit-annexpackage is documented as a prebuilt binary wheel provided on PyPI. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading scientific datasets from well-known repositories, including OpenNeuro, DANDI, and the official DataLad registry (
datasets.datalad.org). These are established scientific data sources. - [COMMAND_EXECUTION]: The skill uses
datalad runanddatalad containers-runto execute shell commands for recording computational provenance. These capabilities are central to the tool's functionality for research reproducibility. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external scientific datasets which represents a standard data ingestion surface. The risk is mitigated by the fact that these are community-vetted scientific sources, and the behavior is essential to the skill's primary purpose of research data management.
Audit Metadata