vaex
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the vaex library and its components (vaex-core, vaex-viz, vaex-hdf5, vaex-ml) as well as optional cloud storage handlers (s3fs, gcsfs, adlfs) from public package registries.
- [COMMAND_EXECUTION]: The documentation includes standard shell commands for package management via uv and for launching the vaex-server utility.
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to read data from external sources such as local files (CSV, HDF5, Arrow) and remote cloud buckets (S3, GCS, Azure). This constitutes an ingestion surface for untrusted data, though this is typical for data analysis tools.
- Ingestion points: Data loading functions such as vaex.open() and vaex.from_csv() in SKILL.md, core_dataframes.md, and io_operations.md.
- Boundary markers: None explicitly defined for data contents.
- Capability inventory: File reading, network access (via cloud handlers), and shell command execution via allowed tools.
- Sanitization: Standard library parsing behavior for tabular formats.
- [DYNAMIC_EXECUTION]: The reference files describe the use of Numba for Just-In-Time (JIT) compilation of custom functions and the application of user-defined functions on DataFrames, which are standard features of high-performance data libraries.
Audit Metadata