csvtk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute 'csvtk' subcommands in the shell to perform data manipulation tasks like filtering, joining, and sorting tabular data.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external data in the form of CSV, TSV, and Excel files.
- Ingestion points: Input files processed by subcommands like
grep,filter, andjoin(documented in SKILL.md). - Boundary markers: The skill establishes strict rules requiring explicit format definitions (e.g.,
-tfor TSV) to prevent incorrect data interpretation. - Capability inventory: Shell execution of 54 different
csvtksubcommands for data processing. - Sanitization: The
references/traps.mdfile provides extensive documentation on avoiding silent parsing errors and ensures the agent treats input data with specific, safe configurations.
Audit Metadata