data-analyst
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a local search engine based on the BM25 algorithm to retrieve data analysis workflows, metric definitions, and code snippets from local CSV files, avoiding unnecessary external network requests.
- [SAFE]: Instructions explicitly mandate security best practices for data access, requiring the use of .env files for credentials and instructing the agent to never hardcode secrets or ask users to move sensitive files into the project data directory.
- [SAFE]: The skill includes comprehensive guidance on preventing SQL injection by recommending parameterized queries and the use of placeholders in database interactions.
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard package managers (pip and npx) to manage legitimate dependencies such as python-dotenv and the crushdataai utility, which are consistent with the skill's purpose and author identity.
- [COMMAND_EXECUTION]: The workflow involves executing local Python scripts (search.py) to access the reference database and using specialized CLI tools to explore database schemas and manage data connections safely.
Audit Metadata