data-analyst

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): Comprehensive analysis of all script and metadata files reveals no malicious patterns. The skill adheres to its stated purpose of data analysis.
  • [COMMAND_EXECUTION] (SAFE): The Python script scripts/analyze_missing_values.py uses pandas for data ingestion and json for output. It does not utilize dangerous functions such as eval(), exec(), or subprocess to run system commands.
  • [DATA_EXFILTRATION] (SAFE): No network-related functions (requests, urllib, fetch) are present. Data processing is entirely local to the file system.
  • [PROMPT_INJECTION] (SAFE): There are no attempts to override system prompts or bypass AI safety constraints in any of the analyzed files.
  • [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes external CSV data. While this provides a surface for indirect prompt injection (e.g., via malicious column names), the script output is structured statistics which mitigates the risk of an agent blindly executing instructions embedded in the data.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 12:01 AM