dataset-transformation
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates Python transformation scripts and then executes them locally using
python3to validate the logic against sample data. It also uses shell commands likeaws s3 cpfor data movement between local storage and S3 buckets. - [EXTERNAL_DOWNLOADS]: Fetches dataset format specifications and schema definitions from the official AWS documentation (docs.aws.amazon.com) to ensure the target formats are up to date.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads and processes untrusted data from user-provided datasets.
- Ingestion points: Reads 1–2 sample records from user datasets (local or S3) using
pd.read_jsoninSKILL.md(Step 5) andreferences/dataset_transformation_code.md. - Boundary markers: No specific delimiters or "ignore instructions" markers are applied when the agent reads or presents sample records from the data.
- Capability inventory: The agent has the ability to write files (
fs_write), execute shell commands (subprocess), and run generated Python code (python3). - Sanitization: There is no evidence of sanitization or content filtering for the data ingested from user datasets.
Audit Metadata