roc-diagnostic-performance
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external CSV and TSV files via the
--expression_fileand--group_filearguments inscripts/io.R. It lacks explicit boundary markers or specific instructions to ignore embedded instructions within the processed data. The skill possesses capabilities to write output files (CSV, RDS) and generate PDF plots (scripts/io.R, scripts/plotting.R). Sanitization is implemented inscripts/functions.Rthrough mandatory gene matching against matrix headers and verification that all expression values are finite numeric types. - [DYNAMIC_EXECUTION]: The skill dynamically constructs R model formulas from the user-provided
--marker_genesargument. This formula is then parsed usingstats::as.formulainscripts/functions.Rto fit the logistic regression model. This represents a dynamic execution pattern based on user-supplied strings.
Audit Metadata