polars
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from various external sources, which presents a potential attack surface for indirect prompt injection if those sources contain adversarial instructions.\n
- Ingestion points: The skill uses
pl.read_csv,pl.scan_csv,pl.read_parquet,pl.scan_ndjson, andpl.read_database_urito bring external content into the agent's context (found inSKILL.mdandreferences/io_guide.md).\n - Boundary markers: The documentation advises on using "authorized destination," "data scope," and "least-privilege connections" to manage access (found in
SKILL.mdandreferences/io_guide.md).\n - Capability inventory: The skill possesses significant data manipulation and output capabilities, including
write_csv,write_parquet,write_database, and integration with other libraries like Pandas and NumPy (found inreferences/io_guide.mdandreferences/pandas_migration.md).\n - Sanitization: The guides recommend the use of "parameterized user values" for database interactions and "spreadsheet-safe export policy" for CSV outputs (found in
references/io_guide.md).
Audit Metadata