astropy
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
astropyPython library and its optional dependencies using a package manager. - [DATA_EXFILTRATION]: The skill supports network-based data retrieval from external sources including S3 buckets and HTTP servers through its integrated FITS file handling modules.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its ability to ingest and process external files like FITS headers and tabular data which may contain embedded instructions.
- [PROMPT_INJECTION]: Ingestion points:
astropy.io.fits.getdata(),astropy.io.fits.open(), andastropy.table.Table.read(). Boundary markers: None specified. Capability inventory: Package installation, file system read/write, and external network requests. Sanitization: No sanitization or validation mechanisms are described for the content of processed files.
Audit Metadata