The Agent Skills Directory

[SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill follows best practices by including explicit instructions to check for sensitive PII (Personally Identifiable Information) in processed datasets.
[COMMAND_EXECUTION]: The skill utilizes local Python execution (via pandas and matplotlib) to process data and generate reports. This is a standard and expected functional capability for a data analysis agent performing statistical operations.
[PROMPT_INJECTION]: Vulnerability surface identified for Indirect Prompt Injection.
- Ingestion points: The skill ingests untrusted data from CSV, JSON, Excel, and API responses (specified in SKILL.md).
- Boundary markers: Absent; the instructions do not explicitly tell the agent to ignore instructions embedded within the data strings.
- Capability inventory: Includes the ability to execute Python scripts and write files to the local filesystem (specified in SKILL.md).
- Sanitization: Absent; while it checks for PII, it does not specifically sanitize for embedded LLM instructions. This is a standard risk for data processing skills and no active exploitation or malicious intent was found.

analyze-data