harmonica
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and scripts for legitimate geophysical analysis. The dependencies (harmonica, numpy, verde, boule, xarray, pandas) are standard libraries in the scientific Python ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a script that processes external data files, representing a common ingestion surface for this type of tool.
- Ingestion points: The
scripts/gravity_processing.pyscript loads data from user-supplied CSV files usingpandas.read_csvand NetCDF files usingxarray.open_dataarray. - Boundary markers: Not present; the script relies on standard library parsing of structural data formats.
- Capability inventory: The script includes file-write capability to export processed results to CSV files (
result.to_csv). It does not contain capabilities for network operations, command execution, or dynamic code evaluation. - Sanitization: The script performs basic structural validation (checking for required columns) but does not sanitize the contents of the data. This is considered standard for scientific processing tools and poses minimal risk due to the lack of dangerous downstream capabilities.
Audit Metadata