fiftyone-dataset-export

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and requires the fiftyone Python library. This is the official open-source package provided by the vendor (Voxel51) for data visualization and management.
  • [COMMAND_EXECUTION]: The documentation includes a bash command (ls -la) for verifying successful local exports. This is a standard system operation for file verification and poses no security risk in this context.
  • [DATA_EXFILTRATION]: While the skill's primary purpose is data export, it operates strictly on local file systems using user-provided absolute paths. No unauthorized external network transfers or exfiltration attempts were identified.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external datasets which could theoretically contain malicious metadata. However, the use of structured operators like @voxel51/io/export_samples and the requirement for explicit user confirmation of export settings provide significant mitigation against automated exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 02:25 AM