fiftyone-dataset-export
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and requires the
fiftyonePython library. This is the official open-source package provided by the vendor (Voxel51) for data visualization and management. - [COMMAND_EXECUTION]: The documentation includes a bash command (
ls -la) for verifying successful local exports. This is a standard system operation for file verification and poses no security risk in this context. - [DATA_EXFILTRATION]: While the skill's primary purpose is data export, it operates strictly on local file systems using user-provided absolute paths. No unauthorized external network transfers or exfiltration attempts were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external datasets which could theoretically contain malicious metadata. However, the use of structured operators like
@voxel51/io/export_samplesand the requirement for explicit user confirmation of export settings provide significant mitigation against automated exploitation.
Audit Metadata