astropy

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides detailed guidance for using the Astropy library, including proper installation instructions using the uv package manager and pinned versions for reproducibility.
  • [PROMPT_INJECTION]: The skill documents methods for ingesting data from external sources such as FITS files, tables, and online name-resolution services (Indirect Prompt Injection surface).
  • Ingestion points: references/fits.md (fits.open), references/tables.md (Table.read), references/coordinates.md (SkyCoord.from_name).
  • Boundary markers: The skill explicitly warns users about network access and potential data exposure when resolving names or reading remote files, advising confirmation before making network calls.
  • Capability inventory: Capabilities are strictly limited to astronomical data analysis via the Astropy API; there is no evidence of arbitrary code execution or shell interaction based on ingested data.
  • Sanitization: Data is processed using standard library parsers for scientific file formats.
  • [EXTERNAL_DOWNLOADS]: The skill mentions external downloads for library installation and data retrieval (e.g., IERS data, site registries, and remote FITS files) from well-known scientific sources. These are standard features of the documented library.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:12 AM