setup-python-tools
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
pyodidepackage from public registries (npm/pnpm/yarn). This is a standard dependency for the stated functionality. - [REMOTE_CODE_EXECUTION]: The skill configures a runtime environment where Python code is fetched from the Cognite Data Fusion (CDF) configuration at execution time and run within the user's browser via Pyodide. This is the intended primary purpose of the skill for executing Python-based agent tools.
- [COMMAND_EXECUTION]: The skill provides commands for installing necessary dependencies using standard Node.js package managers.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where the agent processes and executes code fetched from an external configuration (CDF).
- Ingestion points: Python code is retrieved from the
agent.configin Cognite Data Fusion (CDF) during runtime. - Boundary markers: The skill does not explicitly define boundary markers within the instructions, relying on the underlying
@cognite/dune-industrial-componentslibrary to handle code wrapping. - Capability inventory: The Pyodide environment has access to the Cognite SDK and associated credentials injected by the
usePyodideRuntimehook, allowing for authenticated operations against the CDF API. - Sanitization: Sanitization of the fetched Python code is managed by the vendor's library; the skill itself does not provide additional validation steps.
Audit Metadata