seaborn

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the seaborn library and its dependencies using the uv package manager. seaborn is a well-known, reputable library for data visualization. Official example datasets are also fetched via the sns.load_dataset() function from Seaborn's public repository.
  • [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it is designed to ingest and process data from external sources such as CSV files and remote datasets. Maliciously crafted data could theoretically attempt to influence an agent's behavior, though the skill itself does not contain any malicious triggers or override instructions.
  • Ingestion points: pd.read_csv() and sns.load_dataset() calls within SKILL.md and references/examples.md.
  • Boundary markers: Not present.
  • Capability inventory: The skill utilizes the Bash tool for package installation and standard Python libraries for data analysis and visualization.
  • Sanitization: No specific input validation or data sanitization is implemented in the visualization templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:13 AM