scikit-survival

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements comprehensive input validation through a shared utility module (_common.py), enforcing strict limits on file size (32MB), row counts (20,000), and feature dimensions.- [DATA_EXFILTRATION]: The bundled scripts explicitly reject network URLs and symbolic links for both input and output operations, ensuring that processing remains strictly local.- [DYNAMIC_EXECUTION]: A lazy import of the numpy package is used for a single calculation in the validation report; it uses a static string and poses no security risk.- [DYNAMIC_EXECUTION]: Data serialization via NumPy is configured with allow_pickle=False by default, preventing potential unsafe deserialization attacks.- [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV data but utilizes rigorous type checking and structural validation, effectively minimizing the risk from untrusted data inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 02:07 AM