skills/reason-machines/ai-agent-skills/data-analysis-agent-business-intelligence/Gen Agent Trust Hub
data-analysis-agent-business-intelligence
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions recommend executing remote scripts directly from GitHub using high-risk patterns.
- Evidence:
curl -fsSL https://raw.githubusercontent.com/Zafer-Liu/Data-Analysis-Agent/main/install.sh | shin SKILL.md. - Evidence:
iwr -useb https://raw.githubusercontent.com/Zafer-Liu/Data-Analysis-Agent/main/install.ps1 | iex(PowerShell equivalent) in SKILL.md. - [COMMAND_EXECUTION]: The skill instructs the user to grant execution permissions to downloaded scripts and run them locally.
- Evidence:
chmod +x start.commandand./start.commandin SKILL.md. - [EXTERNAL_DOWNLOADS]: The skill relies on cloning a repository from an unverified third-party GitHub account (
Zafer-Liu) and installing multiple external dependencies. - Evidence:
git clone https://github.com/Zafer-Liu/Data-Analysis-Agent.gitandpip install -r requirements.txtin SKILL.md. - [CREDENTIALS_UNSAFE]: The skill facilitates the handling and storage of highly sensitive credentials, including LLM API keys and database connection strings containing passwords.
- Evidence: Mentions of
DEEPSEEK_API_KEY,OPENAI_API_KEY,ANTHROPIC_API_KEY, and connection strings likemysql+pymysql://{username}:{password}@{host}:{port}/{database}in SKILL.md.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/Zafer-Liu/Data-Analysis-Agent/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata