data-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts in the
scripts/directory designed for command-line execution to process data files and generate reports. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its data ingestion capabilities.
- Ingestion points: Untrusted data is ingested from CSV files using
pandas.read_csvinscripts/analyze_csv.py,scripts/describe_data.py, andscripts/summarize_data.py. - Boundary markers: Output reports do not utilize specific boundary markers or instructions to differentiate processed data from potential agent commands.
- Capability inventory: The skill has the capability to write files to the local
out/directory and print data summaries to the standard output. - Sanitization: No sanitization or escaping is performed on the data read from CSV files before it is included in the analysis reports.
Audit Metadata