owid-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
owid-catalogPython package and fetches data from external domains includingourworldindata.organdsearch.owid.io. These resources are owned and operated by the data provider (Our World In Data). - [COMMAND_EXECUTION]: The skill utilizes
pipanduvvia Bash to manage dependencies and execute Python analysis scripts. This is standard behavior for Python-based data science skills. - [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from external sources (OWID indicators and metadata). While this constitutes an ingestion point for untrusted data, the source is a reputable research organization, and the data typically consists of statistical values and curated descriptions, posing a low risk of prompt injection.
Audit Metadata