time-series-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting data from an external file.
- Ingestion points: The skill reads data using
pd.read_csv('time_series_data.csv')in Step 1. - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore potential instructions embedded within the CSV data.
- Capability inventory: The skill has the capability to write files to the local file system (
plt.savefig,to_csv). It does not have network access or subprocess execution capabilities. - Sanitization: There is no evidence of sanitization or validation of the input data beyond standard CSV parsing and timestamp conversion.
Audit Metadata