fiftyone-create-notebook
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill converts user requirements and external documentation into executable code, which creates a surface for indirect prompt injection. Ingestion points include user prompts and the documentation URL https://docs.voxel51.com/llms.txt. The skill has capabilities to write .ipynb files and execute them. No explicit sanitization of user-provided data is specified before its interpolation into code cells.
- [DYNAMIC_EXECUTION]: The skill performs dynamic execution of generated content as part of its validation phase. It is instructed to use papermill to run the created notebook in a temporary virtual environment.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the vendor's official domain (docs.voxel51.com) and suggests installing standard libraries such as fiftyone and ultralytics. These are recognized as vendor-owned resources and trusted machine learning packages.
- [COMMAND_EXECUTION]: The validation process involves executing shell commands to create virtual environments, install dependencies, and run notebook execution tools.
Audit Metadata