choose-python-library
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
skore_skillsCLI tool to verify project stack policies and resolve library symbols. This execution is part of the skill's intended functionality to manage dependencies within the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes environment state data which could theoretically be manipulated to influence the agent's choice of library.
- Ingestion points: Output from
python -m skore_skills env stackand symbol lookups. - Boundary markers: No delimiters are specified in the instructions for separating tool output.
- Capability inventory: Triggers library installation via a separate skill and performs metadata queries.
- Sanitization: Relies on the integrity of the local managed project configuration.
Audit Metadata