wandb
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform REST and GraphQL operations against the Weights & Biases API. This is the primary mechanism for run management and data retrieval. - [EXTERNAL_DOWNLOADS]: Communicates with official Weights & Biases infrastructure (
api.wandb.ai) and references documentation from official sources (docs.wandb.ai,wandb.github.io). These are well-known services relevant to the skill's purpose. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests data from external sources.
- Ingestion points: Run metadata, project metrics, artifact names, and reports are fetched from
api.wandb.aiand processed by the agent. - Boundary markers: None identified in the instructional templates; the agent processes the raw JSON responses from the API.
- Capability inventory: Uses
curlfor network requests and interacts with temporary files in/tmp/. No arbitrary code execution or filesystem modification tools beyond its primary scope are noted. - Sanitization: No explicit sanitization or instruction-ignoring delimiters are provided for the data returned from the API.
Audit Metadata