wrangling-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill focuses on workflows that handle messy and untrusted data files from external sources.
- Ingestion points: External datasets are loaded using pandas (
pd.read_csv,pd.read_excel) and Stata commands across multiple guides, such ascsv-data-analyzer/SKILL.mdanddata-cog-guide/SKILL.md. - Boundary markers: Not applicable, as the data is parsed as standard tabular structures rather than being directly re-interpolated into live LLM prompts.
- Capability inventory: Core actions are constrained to statistical summaries, data transformations, visualization, and local machine learning models; no malicious capabilities like shell access or network data transmission exist.
- Sanitization: Pipelines implement thorough sanitization practices including type casting, regex-based special character removal, and missing value treatment.
- [SAFE]: The documentation contains a standard reference and installation instructions for an open-source repository (
https://github.com/Wilson-ZheLin/Streamline-Analyst.git) instreamline-analyst-guide/SKILL.md, which is benign and poses no security threat.
Audit Metadata