datalad

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install datalad and git-annex via uv pip install. The git-annex package is documented as a prebuilt binary wheel provided on PyPI.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading scientific datasets from well-known repositories, including OpenNeuro, DANDI, and the official DataLad registry (datasets.datalad.org). These are established scientific data sources.
  • [COMMAND_EXECUTION]: The skill uses datalad run and datalad containers-run to execute shell commands for recording computational provenance. These capabilities are central to the tool's functionality for research reproducibility.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external scientific datasets which represents a standard data ingestion surface. The risk is mitigated by the fact that these are community-vetted scientific sources, and the behavior is essential to the skill's primary purpose of research data management.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:15 AM