zarr-python

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for using the Zarr-Python library. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
  • [COMMAND_EXECUTION]: The skill includes shell commands for package management using uv pip and for metadata migration using the zarr CLI tool. These are standard development operations within the context of the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: The instructions recommend installing standard scientific computing packages including zarr, s3fs, and gcsfs with specific version pins. These packages are well-known and hosted on official registries.
  • [DATA_EXPOSURE]: The documentation covers integration with cloud storage providers like AWS S3 and Google Cloud Storage. It correctly identifies security best practices by advising users not to hardcode credentials and to use provider-native authentication methods like IAM roles or Workload Identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM