alterlab-survey-design
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external survey data using Python scripts, which creates a potential surface for indirect prompt injection. 1. Ingestion points: Survey response data (CSV, Excel) processed during pilot testing and validation as described in SKILL.md and references. 2. Boundary markers: The skill does not define explicit delimiters or instructions to isolate or ignore embedded content within processed data. 3. Capability inventory: Execution of Python code via the Bash tool to perform statistical analysis. 4. Sanitization: No sanitization or validation of the data content is mentioned before it is processed by statistical routines.
- [EXTERNAL_DOWNLOADS]: The skill requires specialized Python packages 'factor_analyzer' and 'semopy' from the public PyPI registry to support psychometric validation tasks.
- [DYNAMIC_EXECUTION]: The skill provides Python code templates for calculating reliability indices and performing factor analysis. These scripts are dynamically executed by the agent to analyze user-provided research data.
Audit Metadata