vaex
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation references the use of CLI tools such as
vaex-serverfor hosting remote data access points. - [DATA_EXPOSURE]: Provides templates for connecting to external databases and cloud storage services (S3, GCS, Azure). While examples contain placeholders like
user:password, these are standard documentation practices for credential management. - [DYNAMIC_EXECUTION]: Includes patterns for Just-In-Time (JIT) compilation using Numba (
@numba.jit) and dynamic function application viadf.applyto achieve high-performance vectorized operations on large datasets. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process massive tabular datasets from external and potentially untrusted sources (CSV, Parquet, SQL databases). This presents an inherent attack surface for indirect prompt injection if the data content is used to drive subsequent agent decision-making.
- [EXTERNAL_DOWNLOADS]: Documents how to fetch data from remote cloud repositories and mentions dependencies on various third-party ecosystem libraries for storage access (s3fs, gcsfs, adlfs) and machine learning (XGBoost, LightGBM, TensorFlow).
Audit Metadata