alterlab-ssci-orchestrator
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a logical coordinator for research pipelines and does not contain any evidence of malicious code, obfuscation, or unauthorized data access.
- [COMMAND_EXECUTION]: The skill utilizes a local Python script
scripts/passport.pyto calculate the next gate and routing for analysis modules. The script is implemented using the Python standard library, usesargparsefor safe command-line parsing, and validates all inputs against fixed internal lists of allowed stages and design types. - [DATA_EXPOSURE]: No sensitive file paths, environment variables, or hardcoded credentials were found in the instructions or the supporting script.
- [INDIRECT_PROMPT_INJECTION]: The skill processes a YAML 'Design Passport' which is an ingestion point for external data. However, the risk is minimal as the supporting script
passport.pydoes not use unsafe deserialization or execution functions (likeevalorexec) and strictly maps inputs to a predefined methodology spine.
Audit Metadata