dspy-ruby
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The framework includes a
CodeActagent designed to synthesize and execute Ruby code dynamically at runtime. - Evidence: Documentation in
references/core-concepts.mddescribesCodeActas an agent that 'synthesizes and executes Ruby code'. - [COMMAND_EXECUTION]: The skill provides toolsets that allow the agent to execute system commands and database operations.
- Evidence:
references/toolsets.mddescribesGitHubCLIToolsetfor GitHub CLI interactions andDatabaseToolsetfor executing SQL commands. - [PROMPT_INJECTION]: The framework establishes a surface for indirect prompt injection by processing external data with high-capability agents.
- Ingestion points: Data inputs in
DSPy::Signatureclasses as seen inSKILL.mdandreferences/core-concepts.md(e.g.,email_content). - Boundary markers: Relies on structured output formatting and JSON Schema to delimit data.
- Capability inventory: Dynamic code execution (
CodeAct) and shell command execution (GitHubCLIToolset). - Sanitization: The provided templates do not show explicit validation or sanitization of input data before processing.
- [EXTERNAL_DOWNLOADS]: The documentation references several official adapter gems for connecting to LLM providers.
- Evidence:
SKILL.mdandreferences/providers.mdmention gems such asdspy-openai,dspy-anthropic, anddspy-gemini. - [DATA_EXFILTRATION]: The framework supports exporting runtime telemetry to the Langfuse service.
- Evidence:
references/observability.mddescribes the observability configuration used to send traces and metrics to Langfuse.
Audit Metadata