analytic-workbench

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No instructions attempting to override agent behavior or bypass safety guidelines were found. The skill maintains a strict human-approval loop for all outputs.- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets. The documentation correctly mandates storing credentials in .env files and accessing them via secure CLI tools.- [EXTERNAL_DOWNLOADS]: All external dependencies are well-known, established data science libraries (e.g., pandas, sf-hamilton, dvc, hydra-core) installed from official package registries.- [REMOTE_CODE_EXECUTION]: No patterns of insecure remote code execution (e.g., curl|bash) or dynamic execution of untrusted code were identified.- [DATA_EXFILTRATION]: No suspicious network activity or indicators of unauthorized data transmission to external domains.- [COMMAND_EXECUTION]: Shell command usage is restricted to legitimate project maintenance tasks, such as running local analysis scripts and invoking official tool CLIs.- [SAFE]: The skill demonstrates high maturity by implementing automated data quality reviews, file hashing for provenance tracking, and clear separation between data acquisition and transformation logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 04:01 PM