ensaio
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the acquisition of geoscience datasets through the Ensaio library, which fetches data from recognized scientific repositories such as Zenodo (via doi.org/10.5281/zenodo.5879163) and PANGAEA (via doi.org/10.1594/PANGAEA.886889).
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: External files are retrieved using fetcher functions like
ensaio.fetch_alps_gps. - Boundary markers: The instructions do not specify explicit delimiters for the data content to prevent the agent from interpreting it as commands.
- Capability inventory: The skill uses standard file access tools including
Path.read_bytesandpandas.read_csv. - Sanitization: Data integrity is protected by verifying SHA256 hashes against a predefined registry maintained by the library.
Audit Metadata