time-series-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied CSV files and incorporates the data into analytical reports, which creates a potential surface for indirect prompt injection if the input files contain malicious strings.
- Ingestion points: The
load_csvfunction inscripts/ts_analyzer.pyreads data from user-specified file paths. - Boundary markers: Absent. The
format_reportfunction inscripts/ts_analyzer.pyand theassets/ts_report_template.mddo not use delimiters or warnings to isolate processed data from agent instructions. - Capability inventory: The skill has the capability to read local files (CSV) and write reports to the filesystem (via the
--outputflag in the Python script). - Sanitization: While metric values are validated and cast to floats, the
datecolumn values are processed as strings and included directly in the formatted output without escaping or sanitization.
Audit Metadata