networkx
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the use of the
picklemodule (pickle.load,nx.read_gpickle) inreferences/io.md. Usingpickleto deserialize data from untrusted sources is unsafe as it allows for arbitrary code execution.\n- [PROMPT_INJECTION]: Potential for indirect prompt injection via external data files.\n - Ingestion points: Functions such as
nx.read_edgelist,nx.read_graphml, andnx.read_jsoninreferences/io.md.\n - Boundary markers: Absent; no specific delimiters or warnings to ignore embedded instructions are provided to the agent.\n
- Capability inventory: The skill enables file system writes (
nx.write_edgelist), database modifications (df.to_sql), and interactive visualizations via Plotly or PyVis.\n - Sanitization: Absent; the documentation does not describe methods for escaping or validating attributes read from external files.\n- [DATA_EXFILTRATION]: Extensive file and database I/O capabilities documented in
references/io.mdandSKILL.md(e.g.,nx.read_edgelist,nx.write_graphml,pd.to_sql) allow for accessing and writing sensitive local data.
Audit Metadata