data-scientist
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on statistical analysis and machine learning workflows, utilizing standard Python libraries such as pandas, numpy, and scikit-learn.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection via data ingestion.
- Ingestion points: The skill reads local data using 'pd.read_csv("customer_data.csv")' in SKILL.md.
- Boundary markers: Not present, as the code is designed for standard data analysis on local files.
- Capability inventory: Python code execution for statistical modeling and data visualization.
- Sanitization: A comprehensive quality checklist is provided to ensure data integrity, though it focuses on statistical quality rather than adversarial injection. The risk is assessed as safe given the local scope and standard implementation.
- [SAFE]: No evidence of command execution, network exfiltration, obfuscation, or persistence mechanisms was found. The instructions emphasize reproducibility and methodological rigor.
Audit Metadata