meta-rob-plot
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The R script
scripts/rob2_plot.Rcontains a fallback mechanism that usessystem2to execute a local Python script (scripts/rob2_plot.py). The command is constructed dynamically using a computed path for the Python script and arguments (csv_path,save_name,output_dir) derived from user input. - [COMMAND_EXECUTION]: The skill instructions and scripts involve the execution of shell commands (
Rscript,python) and file system operations like directory creation and file writing to generate plotting artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from a user-provided CSV file and passes metadata (file paths and output names) into the execution environment.
- Ingestion points: CSV files are read by
read.csvinscripts/rob2_plot.Randpd.read_csvinscripts/rob2_plot.py. - Boundary markers: None identified to separate data from execution instructions during file processing.
- Capability inventory: The skill has capabilities for file reading, file system writing (PNG outputs), and subprocess spawning via R's
system2function. - Sanitization: While the R script validates specific domain assessment values (e.g., 'Low', 'High'), there is no explicit sanitization of the file paths or output names against path traversal or command injection characters before they are passed to the subprocess call.
Audit Metadata