programming
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external files such as CSV, Excel, and SQL databases, which creates a surface for indirect prompt injection. \n- Ingestion points: The
scripts/pandas_profiler.pyscript and various documentation files utilizepandasfunctions to read external data. \n- Capability inventory: The skill enables extensive data manipulation and statistical analysis capabilities that could be exploited if an agent follows instructions embedded in malicious data files. \n- Boundary markers: No delimiters or explicit instructions are provided to the agent to ignore potentially malicious content within processed data. \n- Sanitization: The skill does not implement or recommend sanitization or validation of data contents before analysis.
Audit Metadata