polars
Warn
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The README.md recommends installing the companion tool
polars-mcpfrom a personal GitHub repository (github.com/r-brink/polars-mcp) usinguvx. This encourages the agent to advise the user to download and execute code from a third-party source not associated with the official Polars organization. - [EXTERNAL_DOWNLOADS]: The skill points to official Polars documentation at
docs.pola.rsand thepolars-incGitHub organization. These are vendor-owned resources and are standard for library documentation lookup. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external data files, which presents a surface for indirect prompt injection.
- Ingestion points: Data scanning functions such as
pl.scan_csv,pl.scan_parquet, andpl.scan_ndjsoninSKILL.mdandreferences/lazy-api.md. - Boundary markers: No instructions are provided for using delimiters or boundary markers to isolate data content from the prompt context.
- Capability inventory: The skill allows the agent to perform a wide range of data transformations, aggregations, and joining operations using the Polars API.
- Sanitization: There are no specific sanitization or filtering steps recommended for data content beyond basic type casting.
Audit Metadata