managing-streamlit-apps
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the deployment of user-defined Python source code to a remote sandbox environment through the
streamlit-apps-set-sourcetool. - Ingestion points: The
streamlit-apps-set-sourcetool accepts the primaryapp.pysource code string, along with supplementary files and assets provided as text or base64 data. - Boundary markers: No explicit boundary markers or instructions to ignore embedded prompts within the uploaded source code or files are defined in this document.
- Capability inventory: The skill utilizes a suite of lifecycle management tools including
streamlit-apps-create,streamlit-apps-set-source,streamlit-apps-start,streamlit-apps-stop,streamlit-apps-status,streamlit-apps-versions,streamlit-apps-delete, andstreamlit-apps-update. - Sanitization: The instructions do not specify any input validation or sanitization procedures for the code or data provided to the deployment tool.
Audit Metadata