alterlab-pylabrobot
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
pylabrobotPython package from the official public registry to enable its core functionality. - [DYNAMIC_EXECUTION]: The skill provides code templates for generating Python scripts that are subsequently executed to perform laboratory automation tasks. This constitutes a standard script generation and execution pattern for its automation use case.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data via JSON files, representing a potential surface for indirect prompt injection.
- Ingestion points: External deck layouts and resource states are loaded via
Deck.load_from_json_fileandlh.deck.load_all_stateas described inreferences/resources.md. - Boundary markers: The documentation does not specify the use of delimiters or warnings to isolate untrusted data during the loading process.
- Capability inventory: The skill employs
Bash(python:*)for script execution andWrite/Editfor file manipulation. - Sanitization: There is no mention of explicit validation or sanitization for the content of the loaded JSON files.
Audit Metadata