astropy
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed guidance for using the Astropy library, including proper installation instructions using the
uvpackage manager and pinned versions for reproducibility. - [PROMPT_INJECTION]: The skill documents methods for ingesting data from external sources such as FITS files, tables, and online name-resolution services (Indirect Prompt Injection surface).
- Ingestion points:
references/fits.md(fits.open),references/tables.md(Table.read),references/coordinates.md(SkyCoord.from_name). - Boundary markers: The skill explicitly warns users about network access and potential data exposure when resolving names or reading remote files, advising confirmation before making network calls.
- Capability inventory: Capabilities are strictly limited to astronomical data analysis via the Astropy API; there is no evidence of arbitrary code execution or shell interaction based on ingested data.
- Sanitization: Data is processed using standard library parsers for scientific file formats.
- [EXTERNAL_DOWNLOADS]: The skill mentions external downloads for library installation and data retrieval (e.g., IERS data, site registries, and remote FITS files) from well-known scientific sources. These are standard features of the documented library.
Audit Metadata