meta-forest-continuous-plot
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely on local data provided by the user and does not attempt to access sensitive system files or establish network connections. All scripts (Python and R) follow standard data science practices using well-known libraries like pandas, matplotlib, and the R meta/metafor packages.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted external data files to generate reports, though the risk is minimal due to type-validation during processing.
- Ingestion points:
scripts/convert_data.pyreads data fromForest plot_continuity_test data_1.txt. The R and Python analysis scripts (scripts/forest_continuous.R,scripts/forest_continuous.py) ingest CSV files specified via command-line arguments. - Boundary markers: No explicit prompt delimiters or instructions to ignore embedded commands are present in the workflow.
- Capability inventory: The skill is limited to writing PNG images and CSV data tables to the local file system. It executes local scripts via
Rscriptandpythonbut does not possess network exfiltration or arbitrary code execution capabilities. - Sanitization: The scripts perform basic data validation by converting input columns to numeric types using
pd.to_numeric(Python) andas.numeric(R), which effectively filters out non-numeric malicious strings in the data fields.
Audit Metadata