pandera-validation
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): The skill contains only technical instructions and code examples for data validation. No attempt to override agent instructions or bypass safety filters was found.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials (API keys, tokens) or sensitive file paths were detected. The scripts do not perform network operations to external domains.
- [Obfuscation] (SAFE): The code and markdown content are transparent and use standard formatting. No Base64, zero-width characters, or homoglyphs were detected.
- [Unverifiable Dependencies] (SAFE): The skill depends on established and trusted Python packages (pandera, pandas). No remote scripts are downloaded or executed.
- [Indirect Prompt Injection] (SAFE): While the skill processes external data (DataFrames), it does so for the purpose of validation. It provides a structured way to sanitize and verify untrusted data before further processing, which is a security best practice.
- [Dynamic Execution] (SAFE): The
infer_and_export_schemafunction generates Python code strings representing schemas. However, the skill does not useeval()orexec()to run this generated code internally.
Audit Metadata