aeon
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the 'aeon' Python library through standard package management tools. 'aeon' is a reputable and widely-used open-source toolkit for time series analysis hosted on official package registries.
- [INDIRECT_PROMPT_INJECTION]: The skill provides capabilities for loading and analyzing external time series datasets, which serves as a potential surface for indirect prompt injection if the user processes malicious data. This risk is inherent to data-processing tools and should be managed with standard LLM output verification.
- Ingestion points: 'aeon.datasets.load_classification' and 'load_regression' utilities in SKILL.md.
- Boundary markers: No explicit prompt boundaries or 'ignore' instructions are used in the provided code snippets.
- Capability inventory: The skill focuses on data science and machine learning tasks; no evidence of privilege escalation, arbitrary command execution, or unauthorized network operations was found.
- Sanitization: Data is loaded for statistical analysis without specific sanitization for prompt injection markers.
Audit Metadata