zarr-python
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known Python packages including
zarr,s3fs, andgcsfsusing theuvpackage manager. These are standard, official dependencies for scientific computing and cloud storage integration related to the Zarr library.- [COMMAND_EXECUTION]: The documentation provides Bash commands for package management and utilizes thezarrCLI for migrating array metadata between format versions. These commands are typical for the library's operational lifecycle and do not involve suspicious parameters.- [DATA_EXPOSURE]: While the skill involves interacting with cloud storage (S3 and GCS), it includes explicit security warnings to avoid printing, logging, or hardcoding credentials. It correctly recommends industry-standard authentication methods such as IAM roles, profiles, and workload identity.
Audit Metadata