skills/alterlab-ieu/alterlab-academic-skills/alterlab-preregistration-discipline/Gen Agent Trust Hub
alterlab-preregistration-discipline
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/prereg_check.py) to perform structured audits of research plans. The script is restricted to the Python standard library, performs no network operations, and does not invoke sub-processes or dynamic code execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data via JSON input files (
plan.jsonandactual.json). - Ingestion points: External data enters the agent context through the output of the
prereg_check.pyscript, which reads user-supplied JSON files via command-line arguments. - Boundary markers: The skill does not explicitly define prompt boundary markers for the data ingested from the script output, relying instead on the structured nature of the JSON-to-text conversion.
- Capability inventory: The skill possesses
Read,Write,Edit, andBash(python:*)capabilities. The Python script performs local file reading and basic JSON parsing. - Sanitization: The Python script uses
json.load(), which provides inherent safety against code injection during data ingestion compared to unsafe deserialization methods likepickleoreval.
Audit Metadata