index

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Internal Script Execution: The skill includes instructions to execute a local Python validation script (validate_data_context_contract.py) to ensure routing logic remains consistent during development. This is a standard practice for maintaining complex logic within a plugin repository.
  • Dynamic Tool Management: The routing logic can trigger the installation of additional specialized plugins via platform-provided functions (list_available_plugins_to_install and request_plugin_install). This enables the agent to dynamically acquire the specific tools needed to interface with a user's unique data sources (e.g., specific database connectors).
  • Data Processing Surface: The skill is designed to ingest and interpret data from external environments, including SQL warehouses, uploaded spreadsheets, and business applications. While processing untrusted external content is a known surface for indirect prompt injection, the skill includes explicit verification steps and completion gates to review and validate generated artifacts before finalizing the response.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 01:39 PM
Security Audit — agent-trust-hub — index