pybaseball
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and process data from external MLB statistics providers.
- Ingestion points: Data is pulled via
pybaseballfunctions likebatting_statsandstatcastas described in SKILL.md and references/pull_patterns.md. - Boundary markers: The skill instructs the agent to validate schemas and coverage, but lacks explicit delimiters or specific instructions to ignore potential embedded commands in the external data results.
- Capability inventory: The skill includes local script execution via
scripts/smoke_load.pyand file writing capabilities for Parquet artifacts. - Sanitization: No specific sanitization, filtering, or escaping of external data content is defined in the instructions.
- [COMMAND_EXECUTION]: The skill provides a helper script
scripts/smoke_load.pyfor environment verification. This script is intended to be executed to verify that the library and its dependencies are correctly installed and functional within the environment. - [REMOTE_CODE_EXECUTION]: The skill requires the installation of the
pybaseball,pandas, andpyarrowpackages from the official Python Package Index (PyPI). It also fetches data from well-known sports statistics providers such as Baseball Savant and FanGraphs. These operations are essential to the skill's primary functionality and utilize established public repositories and services.
Audit Metadata