data-cleaning-and-visualization
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestrator script
scripts/run_pipeline.pyusessubprocess.runto execute internal Python scripts (clean_data.pyandvisualize_data.py). This is a standard method for managing multi-step workflows but involves execution of local scripts. - Evidence:
subprocess.run([sys.executable, str(clean_script)], check=False)inscripts/run_pipeline.py. - [PROMPT_INJECTION]: The skill processes external data files, which presents a surface for indirect prompt injection (Category 8) where malicious instructions embedded in data could influence future agent steps.
- Ingestion points: The
scripts/clean_data.pyscript reads files fromproblem_files/andcrawled_data/usingpandas(read_csv, read_excel). - Boundary markers: There are no explicit boundary markers or safety instructions to ignore embedded text instructions within the data being cleaned.
- Capability inventory: The skill is limited to reading from input directories, performing data transformations, and writing results to
paper_output/. It lacks network access or high-privilege system capabilities. - Sanitization: Standard data cleaning is performed (missing value imputation, type conversion), but there is no specific sanitization to remove potential prompt injection content from string columns.
Audit Metadata