alterlab-survey-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of an external R package from a non-standard source.
- Evidence: Mentions installing
csSamplingviaremotes::install_github("RyanHornby/csSampling")inreferences/python_vs_r.md. - [DYNAMIC_EXECUTION]: The skill generates and executes scripts at runtime based on user requests.
- Evidence: Utilizes
pythonandRscripttools to execute statistical code for libraries likesamplicsandsurveyfollowing the provided templates. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to malicious instructions embedded in the processed survey data.
- Ingestion points: Processes survey datasets (e.g., ANES, GSS, DHS) referenced in
SKILL.mdandreferences/design_and_variance.md. - Boundary markers: No specific delimiters or safety instructions are defined to separate data from analysis logic.
- Capability inventory: The skill can execute system commands and code via
Bash,python, andRscripttools. - Sanitization: No data validation, schema verification, or content filtering is implemented for the ingested datasets.
Audit Metadata