okf-csv
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation suggests installing the connector binary using
go install github.com/xSAVIKx/okf-skills/skills/okf-csv@latest, which points to the author's vendor repository. - [DATA_EXFILTRATION]: The generated documentation includes the absolute local filesystem path of the source CSV files in the
Resourcemetadata field. This exposes the local file structure to the agent context. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted CSV data to generate summaries and data samples intended for LLM processing.
- Ingestion points: The
readCSVfunction incsv.goreads content from CSV files in the user-specified source directory. - Boundary markers: Content is delimited using Markdown headers and tables.
- Capability inventory: The tool has permissions to create directories and write Markdown/YAML files within the specified output and source directories.
- Sanitization: Column names and types are processed via
okf.SanitizeCellto prevent Markdown table breakage.
Audit Metadata