xarray

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the skill instructions or provided code snippets.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known Python packages (xarray, netCDF4, dask, zarr) from official package registries. These are legitimate and standard dependencies for the library's intended use in scientific computing and do not represent a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for ingesting data from external file formats (NetCDF, GRIB, Zarr) and contains capabilities to perform computations and write results back to the file system. While this constitutes a data-processing surface, it is consistent with the primary purpose of a scientific data analysis tool.\n
  • Ingestion points: Use of xr.open_dataset and xr.open_mfdataset in SKILL.md to load external scientific data files.\n
  • Boundary markers: None present (standard library reference material).\n
  • Capability inventory: File system write operations via to_netcdf and to_zarr, and arbitrary function mapping via apply_ufunc.\n
  • Sanitization: Relies on standard library-level parsing and validation for the supported binary formats.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:41 PM