pivot-table-cross-analysis

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard data science operations using reputable libraries such as pandas, matplotlib, and seaborn for data cleaning and visualization.
  • [SAFE]: File system interactions are limited to reading data from the specified input path and writing analysis reports/visualizations, which aligns with the skill's stated purpose.
  • [SAFE]: There is no evidence of network exfiltration, hardcoded credentials, or code obfuscation techniques.
  • [SAFE]: The skill processes untrusted data from Excel files, which is an indirect prompt injection surface. Ingestion points: The preprocess_pivot_data function in SKILL.md reads data from external files using pd.read_excel. Boundary markers: No explicit delimiters or instructions are used to separate user data from agent instructions. Capability inventory: The skill performs file reads and writes (plt.savefig, pd.ExcelWriter) within SKILL.md. Sanitization: Input data is stripped of whitespace but no semantic sanitization is applied.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 12:24 PM
Security Audit — agent-trust-hub — pivot-table-cross-analysis