ray-data
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface area for processing untrusted data from external cloud storage, which is a known vector for indirect prompt injection.
- Ingestion points: The skill utilizes
ray.data.read_parquet,ray.data.read_csv,ray.data.read_json, andray.data.read_imagesinSKILL.mdto load datasets from external paths. - Boundary markers: Absent; there are no delimiters or specific instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill performs distributed transformations and writes to storage; it does not invoke shell commands, spawn subprocesses, or utilize dynamic execution tools like
evalorexecon data content. - Sanitization: No data validation or escaping mechanisms are present in the provided transformation examples.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard data science libraries and references established resources.
- Installs
ray[data],pyarrow, andpandasfrom official package registries. - References official documentation at
docs.ray.ioand theray-projectGitHub repository, which are well-known technology services.
Audit Metadata