rerun-parquet
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for ingesting data from external Parquet files, which represents an inherent attack surface for indirect prompt injection if the source data is untrusted.\n
- Ingestion points: The
ParquetReaderclass is used to load data from externaltable_pathlocations.\n - Boundary markers: The skill relies on the structured nature of Parquet files and does not define explicit delimiters to separate data from instructions during processing.\n
- Capability inventory: The skill is scoped to use tools like
BashandWebFetchfor file operations and data fetching.\n - Sanitization: There is no specific mention of sanitizing or validating the content of the Parquet files before processing.
Audit Metadata