data-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external datasets, creating a surface for indirect prompt injection where malicious instructions within data files could influence agent behavior.
- Ingestion points: Data is loaded from files like
data.csvandunity_profiler_output.csvusingpd.read_csv. - Boundary markers: The instructions lack markers or delimiters to differentiate data from instructions.
- Capability inventory: Tools enabled include
Bash,Read,Grep, andGlob, and the code can perform file system operations. - Sanitization: No input validation or sanitization is present for the processed files.
Audit Metadata