alterlab-sympy
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documents the use of
pickle.load()for deserializing SymPy objects inreferences/code-generation-printing.md. Deserializing untrusted data with pickle can lead to arbitrary code execution if an agent is tricked into loading a malicious file. - [DYNAMIC_EXECUTION]: The skill demonstrates runtime compilation and execution using
autowrap()andufuncify()inreferences/code-generation-printing.md. These functions compile C or Fortran code at runtime and load the resulting binaries into the Python environment. - [DYNAMIC_EXECUTION]: Extensive use of
lambdify()to generate executable Python/NumPy functions from symbolic expressions is documented throughout the skill. This represents a dynamic code generation surface. - [INDIRECT_PROMPT_INJECTION]: The skill documents the use of
parse_expr()to convert strings into mathematical expressions inreferences/code-generation-printing.md. - Ingestion points: User-provided strings are passed to
parse_expras shown in Pattern 3 ofreferences/code-generation-printing.md. - Boundary markers: Explicit boundary markers are absent in the code examples, although a developer note warns that validation and sanitization are necessary.
- Capability inventory: The skill has access to
Bash(python:*)andBash(uv:*)tools, enabling it to execute the generated code. - Sanitization: No specific sanitization logic is provided in the code examples, relying on the agent or developer to implement it.
Audit Metadata