vaex
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes large external datasets which creates a surface for indirect prompt injection if the data contains malicious instructions.
- Ingestion points: Instructions in
SKILL.mddescribe loading data viavaex.open()andvaex.from_csv(). - Boundary markers: No delimiters or 'ignore instructions' warnings are specified for the data being processed.
- Capability inventory: The skill performs file reads/writes, statistical computations, and visualizations across the provided examples.
- Sanitization: No validation or escaping of the data content is mentioned in the documentation.
Audit Metadata