batch-cohort
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates multiple R scripts by performing string replacement on a base template (
references/base_template_knhanes.R) using a generator script (references/batch_template_generator.R). These scripts are written to the local file system and subsequently executed. - [INDIRECT_PROMPT_INJECTION]: The skill processes external methodology templates and combination matrices (CSV files) which represent an attack surface for indirect injection.
- Ingestion points: Methodology templates and combination spec CSV files are read during Phase 1 and Phase 2 of the workflow defined in
SKILL.md. - Boundary markers: While the skill includes "Critical Rules" and "Anti-Hallucination" instructions, it does not implement explicit delimiters or warnings to ignore instructions that might be embedded within the processed data files.
- Capability inventory: The skill utilizes the
Writetool to create new scripts and theBashtool to execute them, creating a capability chain from data input to execution. - Sanitization: The generation logic in
references/batch_template_generator.Ruses simple string replacement (gsub) which does not sanitize input values for potential R code or shell command injection. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute a master runner script (run_all.R) that triggers the execution of all generated analysis scripts.
Audit Metadata