Csv Analyzer

• Analyzed: May 11, 2026, 5:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: bf876a2ad277bd9dbe6c5fa4257dad21933789f2690f76ec8c299ee740812ab3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides legitimate CSV analysis functionality but contains high-risk coding practices in `scripts/csv_analyze.py`. Specifically, the `cmd_filter` function uses the `eval()` built-in to perform numerical comparisons. While the implementation currently attempts to sanitize inputs using a restrictive regular expression and `float()` casting, the use of `eval()` on data-derived strings is a classic vulnerability pattern. Additionally, the `cmd_group` function lacks robust error handling for the `--agg` argument, which could lead to application crashes.