metforge-data
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute shell commands for data subsetting and to submit batch jobs to HPC clusters using Slurm (
sbatch). This behavior is consistent with its stated purpose of atmospheric science data preparation. - [EXTERNAL_DOWNLOADS]: Fetches scientific datasets from well-known and authoritative technology organizations and services, including the Copernicus Climate Data Store (CDS), NASA GES DISC (Earthdata), and the Earth System Grid Federation (ESGF).
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests untrusted metadata and coordinate data from external scientific files (NetCDF, GRIB, Zarr) during the inspection phase in
SKILL.md. - Boundary markers: Employs a structured 'Dataset Contract' (
references/dataset-contract.md) to define variables and expected dimensions before processing files. - Capability inventory: Involves local file writes for processed data and manifests, network access for data retrieval, and job submission via Slurm.
- Sanitization: Specifically instructs the agent to redact credentials, tokens, cookies, and signed URLs from all provenance records and manifests.
- [DATA_EXFILTRATION]: While the skill accesses external APIs for data retrieval, it includes strong safety instructions to keep credentials outside of version control and to redact them from all processing records. No suspicious data transmission patterns to unverified domains were detected.
Audit Metadata