zarr-python
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the Zarr-Python library. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
- [COMMAND_EXECUTION]: The skill includes shell commands for package management using
uv pipand for metadata migration using thezarrCLI tool. These are standard development operations within the context of the skill's purpose. - [EXTERNAL_DOWNLOADS]: The instructions recommend installing standard scientific computing packages including
zarr,s3fs, andgcsfswith specific version pins. These packages are well-known and hosted on official registries. - [DATA_EXPOSURE]: The documentation covers integration with cloud storage providers like AWS S3 and Google Cloud Storage. It correctly identifies security best practices by advising users not to hardcode credentials and to use provider-native authentication methods like IAM roles or Workload Identity.
Audit Metadata