verde
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a legitimate tool for geoscience data analysis. No malicious code, obfuscation, or persistence mechanisms were detected. The scripts and instructions provided align with the stated purpose of spatial data processing.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied CSV files, which represents a potential surface for indirect injection.
- Ingestion points: The
scripts/grid_data.pyscript reads external CSV files viapandas.read_csv. - Boundary markers: The data is treated as numerical coordinates and values; no specific prompt boundary markers or "ignore instructions" delimiters are used.
- Capability inventory: The skill performs local file reads and writes using standard scientific libraries.
- Sanitization: The script performs basic column validation and handles missing data through NaN removal. The security risk is considered negligible as the ingested data is processed strictly as numerical arrays for mathematical interpolation.
- [EXTERNAL_DOWNLOADS]: The skill depends on standard scientific libraries including
verde,numpy,scipy,pandas,pyproj,xarray, andscikit-learn. These are recognized as well-known and trusted services within the data science ecosystem.
Audit Metadata