seaborn
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
seabornlibrary and its dependencies using theuvpackage manager.seabornis a well-known, reputable library for data visualization. Official example datasets are also fetched via thesns.load_dataset()function from Seaborn's public repository. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it is designed to ingest and process data from external sources such as CSV files and remote datasets. Maliciously crafted data could theoretically attempt to influence an agent's behavior, though the skill itself does not contain any malicious triggers or override instructions.
- Ingestion points:
pd.read_csv()andsns.load_dataset()calls withinSKILL.mdandreferences/examples.md. - Boundary markers: Not present.
- Capability inventory: The skill utilizes the
Bashtool for package installation and standard Python libraries for data analysis and visualization. - Sanitization: No specific input validation or data sanitization is implemented in the visualization templates.
Audit Metadata