python-api
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill is designed to generate and execute Python scripts at runtime to analyze the installed environment. It uses templates in
references/probe_templates.mdthat utilizeimportlibandinspectto extract symbol signatures andpydocfor documentation. This execution is restricted to thescratch/directory for traceability, satisfying the skill's primary requirement of providing verifiable API lookups against the installed version. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from package docstrings and versioned web documentation (Shape 3). Malicious content embedded in these external sources could potentially influence the agent's behavior. The skill mitigates this by requiring verbatim caching into structured markdown files with specific headers (e.g.,
## Signature,## help()) and documentation source attribution. - [EXTERNAL_DOWNLOADS]: The skill performs web searches and fetches narrative documentation from external URLs. These references target official vendor resources (e.g.,
skore.probabl.ai) to ensure accuracy for the specific library versions installed in the workspace.
Audit Metadata