alterlab-pylabrobot

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the pylabrobot Python package from the official public registry to enable its core functionality.
  • [DYNAMIC_EXECUTION]: The skill provides code templates for generating Python scripts that are subsequently executed to perform laboratory automation tasks. This constitutes a standard script generation and execution pattern for its automation use case.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data via JSON files, representing a potential surface for indirect prompt injection.
  • Ingestion points: External deck layouts and resource states are loaded via Deck.load_from_json_file and lh.deck.load_all_state as described in references/resources.md.
  • Boundary markers: The documentation does not specify the use of delimiters or warnings to isolate untrusted data during the loading process.
  • Capability inventory: The skill employs Bash(python:*) for script execution and Write/Edit for file manipulation.
  • Sanitization: There is no mention of explicit validation or sanitization for the content of the loaded JSON files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:37 PM