analytics-access-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
run.py) and instructions in theREADME.mdto execute it. The script uses thepathlibmodule to read from and write to file paths provided via command-line arguments. - [INDIRECT_PROMPT_INJECTION]: The skill processes external structured data (JSON/CSV), creating a surface for indirect prompt injection attacks.
- Ingestion points: The
run.pyscript reads data from an input file specified by the--inputflag. - Boundary markers: No explicit boundary markers or warnings to the agent are present in the code or instructions.
- Capability inventory: The script has the capability to read and write files on the local filesystem and create directories via the
pathlibmodule. - Sanitization: There is no evidence of input validation or sanitization of the content before it is processed or output.
Audit Metadata