query
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes Python scripts based on user input and question processing. Evidence: Instruction 6 in SKILL.md. This behavior is the primary method of fulfilling user requests.
- [PROMPT_INJECTION]: The skill processes external data files, creating a surface for indirect prompt injection. Ingestion points: Loads data from the input/ directory. Boundary markers: No specific markers or delimiters are defined to isolate data content from instructions. Capability inventory: Uses Write and Bash tools to execute generated logic. Sanitization: Column names are cleaned, but the skill lacks validation for the data content itself.
Audit Metadata