data-analyst
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): Comprehensive analysis of all script and metadata files reveals no malicious patterns. The skill adheres to its stated purpose of data analysis.
- [COMMAND_EXECUTION] (SAFE): The Python script
scripts/analyze_missing_values.pyusespandasfor data ingestion andjsonfor output. It does not utilize dangerous functions such aseval(),exec(), orsubprocessto run system commands. - [DATA_EXFILTRATION] (SAFE): No network-related functions (
requests,urllib,fetch) are present. Data processing is entirely local to the file system. - [PROMPT_INJECTION] (SAFE): There are no attempts to override system prompts or bypass AI safety constraints in any of the analyzed files.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes external CSV data. While this provides a surface for indirect prompt injection (e.g., via malicious column names), the script output is structured statistics which mitigates the risk of an agent blindly executing instructions embedded in the data.
Audit Metadata