datacommons-client
Warn
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of 'datacommons-client', which is an unverified package name. The official Data Commons Python library is typically named 'datacommons'.
- [EXTERNAL_DOWNLOADS]: Misleading documentation: The skill provides a link to the official Data Commons GitHub repository (github.com/datacommonsorg/api-python) but directs users to install a differently named package ('datacommons-client'). This discrepancy is a common indicator of a supply chain risk or dependency confusion attempt.
- [COMMAND_EXECUTION]: Instructs the user to execute 'uv pip install' and 'pip install' commands to download and install external code during the setup process.
- [DATA_EXFILTRATION]: Indirect prompt injection surface identified:
- Ingestion points: The skill ingests untrusted data from the Data Commons knowledge graph through various API endpoints, including observation, node, and resolve queries (SKILL.md, references/getting_started.md).
- Boundary markers: Absent. No delimiters or specialized instructions are used to isolate API data from the agent's control logic.
- Capability inventory: The skill possesses capabilities for package installation (pip/uv) and local file writing (to_csv method in getting_started.md).
- Sanitization: No evidence of input validation or content sanitization for the retrieved statistical data or entity identifiers before they are processed or saved.
Audit Metadata