autodiscovery
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes command-line tools including
uvfor package management and theasta/asta-autodiscoveryCLI for running scientific experiments and managing authentication. - [EXTERNAL_DOWNLOADS]: Installs the
asta-autodiscoverytool from the vendor's repository using theuvtool manager. - [INDIRECT_PROMPT_INJECTION]: The skill processes and summarizes experimental outcomes, including AI-generated hypotheses and code, which introduces an indirect prompt injection surface. * Ingestion points: The skill reads experiment nodes (hypothesis, code, outcome) as described in
assets/interpreting-results.md. * Boundary markers: No explicit delimiters or instructions are provided to the agent to treat experimental outputs as untrusted data. * Capability inventory: The skill has the ability to execute bash commands and write JSON files as defined inSKILL.md. * Sanitization: There are no instructions for sanitizing or validating the experimental content before it is processed by the agent.
Audit Metadata