setup-python-tools
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
pyodidepackage at version0.29.3using standard package managers (npm, pnpm, or yarn). Pyodide is a well-known and trusted library for running Python in the browser. - [REMOTE_CODE_EXECUTION]: The skill's primary function is to enable the execution of Python code fetched dynamically from the agent's configuration in Cognite Data Fusion (CDF). While this involves executing remote code, it is the intended primary purpose of the skill and occurs within a sandboxed browser environment (Pyodide).
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform package installations (pnpm add,npm install,yarn add) and provides instructions for modifying application code to include the necessary hooks for Python execution. - [CREDENTIALS_UNSAFE]: The skill mentions that the library injects Cognite SDK credentials into the Python environment. This is a standard feature for the vendor's tools to allow executed scripts to interact with the Cognite platform.
Audit Metadata