skills/owid/skills/owid-catalog/Gen Agent Trust Hub

owid-catalog

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the owid-catalog Python package and fetches data from external domains including ourworldindata.org and search.owid.io. These resources are owned and operated by the data provider (Our World In Data).
  • [COMMAND_EXECUTION]: The skill utilizes pip and uv via Bash to manage dependencies and execute Python analysis scripts. This is standard behavior for Python-based data science skills.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from external sources (OWID indicators and metadata). While this constitutes an ingestion point for untrusted data, the source is a reputable research organization, and the data typically consists of statistical values and curated descriptions, posing a low risk of prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 09:17 AM