data-analysis-jupyter
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Prompt Injection (SAFE): The instructions strictly define a persona for data analysis and visualization. No evidence of instructions designed to bypass safety filters or ignore previous constraints was found.- Data Exposure & Exfiltration (SAFE): The skill does not contain hardcoded credentials, access sensitive system files, or perform unauthorized network requests. All data operations are local to the analysis context.- Unverifiable Dependencies & Remote Code Execution (SAFE): The listed dependencies (pandas, numpy, matplotlib, seaborn, jupyter, scikit-learn, scipy) are standard, trusted libraries in the data science ecosystem. No remote script downloads or piped execution patterns were detected.- Indirect Prompt Injection (LOW): The skill is designed to process external datasets (e.g., CSV files). While this represents a theoretical ingestion surface for indirect prompt injection, the skill lacks high-risk capabilities like network exfiltration or system command execution, rendering the risk negligible.- Command Execution & Privilege Escalation (SAFE): No use of sudo, chmod, or subprocess calls to execute arbitrary system commands was found. The focus remains entirely on Python-based data manipulation.
Audit Metadata