csv-data-summarizer

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's runtime analyze.py directly reads and processes arbitrary user-provided CSV files via pd.read_csv(file_path) (summarize_csv) and then summarizes and interprets their contents (columns, values, and generated insights), meaning untrusted/third-party data supplied by users is consumed and used in the agent's workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 10:38 PM