xarray
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the skill instructions or provided code snippets.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known Python packages (xarray, netCDF4, dask, zarr) from official package registries. These are legitimate and standard dependencies for the library's intended use in scientific computing and do not represent a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for ingesting data from external file formats (NetCDF, GRIB, Zarr) and contains capabilities to perform computations and write results back to the file system. While this constitutes a data-processing surface, it is consistent with the primary purpose of a scientific data analysis tool.\n
- Ingestion points: Use of
xr.open_datasetandxr.open_mfdatasetinSKILL.mdto load external scientific data files.\n - Boundary markers: None present (standard library reference material).\n
- Capability inventory: File system write operations via
to_netcdfandto_zarr, and arbitrary function mapping viaapply_ufunc.\n - Sanitization: Relies on standard library-level parsing and validation for the supported binary formats.
Audit Metadata