climate-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure data handling practices by implementing mandatory SHA256 integrity verification for all input data files against a provided provenance record.
  • [SAFE]: File system operations are constrained to user-specified local paths provided via command-line arguments, with explicit checks to prevent overwriting existing data.
  • [SAFE]: The Python script uses standard, well-vetted scientific libraries (xarray, pandas, numpy, scipy, verde, pyproj) for all calculations and data transformations.
  • [SAFE]: No network connectivity or remote data fetching is attempted; the skill operates entirely on local datasets as documented.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (CSV/JSON), it implements a strict validation chain:
  • Ingestion points: Local CSV source and JSON provenance files (scripts/station_pipeline.py).
  • Boundary markers: Explicit schema validation, column type enforcement, and SHA256 checksum verification.
  • Capability inventory: Local file writing for NetCDF and JSON reports; no shell execution or network tools.
  • Sanitization: Rigid parsing of temperature values and coordinate validation ensure the data is not treated as executable instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 01:47 PM