Data Cleaning Pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external datasets (e.g., CSV files) which represents an attack surface for indirect prompt injection if the data contains malicious instructions targeting the LLM during analysis.
- Ingestion points: Reads local CSV data via
pd.read_csv('raw_data.csv')inSKILL.md. - Boundary markers: None explicitly defined in the provided code snippets to distinguish between data and instructions.
- Capability inventory: The skill performs data transformations (imputation, scaling, filtering) but does not include network operations, file writes outside the local directory, or arbitrary code execution (eval/exec).
- Sanitization: Includes text cleaning steps such as
df['name'].str.replace('[^a-z0-9\s]', '', regex=True)which provides some level of sanitization for text data.
Audit Metadata