streamlit

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'streamlit' package via pip from the standard Python Package Index (PyPI). This is the official and expected installation method for this library.
  • [INDIRECT_PROMPT_INJECTION]: The documentation includes patterns for handling external data through st.file_uploader and user inputs like st.text_input. While these are entry points for external data, the skill is focused on UI rendering and data visualization without dangerous capabilities like arbitrary command execution or network exfiltration.
  • Ingestion points: st.file_uploader in SKILL.md (Pattern 2) and st.text_input in SKILL.md (Pattern 7).
  • Boundary markers: Not applicable to these code snippets.
  • Capability inventory: Data processing with Pandas, visualization with Plotly/Matplotlib, and UI component rendering.
  • Sanitization: Standard interactive widgets provided by the framework.
  • [COMMAND_EXECUTION]: Provides standard commands for checking the framework version and running an application ('streamlit run app.py'). these are routine operations for Streamlit development.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:37 PM