pandas-pro
Fail
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains a reference to an external documentation URL (https://jeffallan.github.io/claude-skills/skills/data-ml/pandas-pro/) that has been blacklisted and identified as malicious by security scanners. The SKILL.md file itself is also flagged with a malicious reputation.
- [METADATA_POISONING]: The skill metadata attributes the author as 'Jeffallan' (https://github.com/Jeffallan) and the company as 'Synergetic Solutions', which conflicts with the provided author context ('midudev').
- [INDIRECT_PROMPT_INJECTION]: The skill processes pandas DataFrames which are ingestion points for potentially untrusted data. 1. Ingestion points: Data loading and transformation workflows in SKILL.md and all files in the references directory. 2. Boundary markers: No instructions or delimiters are provided to the agent to distinguish between code instructions and untrusted data content. 3. Capability inventory: The skill has the capability to perform comprehensive data manipulation and analysis on local datasets. 4. Sanitization: No evidence of input validation or content sanitization processes is included in the instructions.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata