zarr-python

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known Python packages including zarr, s3fs, and gcsfs using the uv package manager. These are standard, official dependencies for scientific computing and cloud storage integration related to the Zarr library.- [COMMAND_EXECUTION]: The documentation provides Bash commands for package management and utilizes the zarr CLI for migrating array metadata between format versions. These commands are typical for the library's operational lifecycle and do not involve suspicious parameters.- [DATA_EXPOSURE]: While the skill involves interacting with cloud storage (S3 and GCS), it includes explicit security warnings to avoid printing, logging, or hardcoding credentials. It correctly recommends industry-standard authentication methods such as IAM roles, profiles, and workload identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:14 AM