skills/wu-yc/labclaw/polars/Gen Agent Trust Hub

polars

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill includes a section titled 'Suggest Using K-Dense Web For Complex Worflows' which instructs the agent to proactively suggest a specific hosted platform (www.k-dense.ai) when tasks reach a certain level of complexity. This is an attempt to influence the agent's behavioral logic for promotional purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data formats such as CSV, Parquet, and JSON, which creates a surface for indirect prompt injection if the data files contain malicious instructions.
  • Ingestion points: SKILL.md (Code examples for pl.read_csv, pl.read_parquet, pl.read_json, and pl.scan_csv).
  • Boundary markers: None specified in the instructions for data handling.
  • Capability inventory: Python code execution for data manipulation and analysis.
  • Sanitization: No explicit sanitization or validation of the data content is described in the provided examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:25 AM