near-surface-geophysics
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external geophysical data formats (CSV, SEG-Y, EDI), which creates a potential surface for indirect prompt injection.
- Ingestion points: Data is loaded via
pandas.read_csvinscripts/ert_layered_diagnostic.pyand through domain-specific libraries likegprpyandmtpyas described inSKILL.md. - Boundary markers: The workflow relies on strict structured data formats and explicit schema definitions provided in
references/validated_branches.md. - Capability inventory: The skill's capabilities are limited to local file read/write operations and scientific computations. It does not utilize network access tools or shell execution commands.
- Sanitization: The
load_inputsfunction inscripts/ert_layered_diagnostic.pyimplements rigorous validation, including numeric type enforcement, finiteness checks, and electrode identity verification, which mitigates the risk of processing malicious payloads embedded in data. - [SAFE]: The skill incorporates several proactive security and integrity measures:
- Data Integrity: The Python script uses
hashlibto generate and verify SHA256 checksums for input and output files, ensuring that the processed data remains untampered. - Network Privacy: The documentation in
references/validated_branches.mdspecifically instructs the agent to setget_elevation=Falsewhen using themtpylibrary to prevent unexpected external network calls for elevation metadata lookup.
Audit Metadata