batch-cohort
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
batch_template_generator.Rto generate N individual R scripts by performing string replacements (gsub) on a base template (base_template_knhanes.R). These generated scripts are then executed at runtime using thesource()function within a master runner script (run_all.R). While this is the intended core functionality, it represents a dynamic code generation and execution pattern. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a
combinations.csvfile to define analysis parameters. Theexposure_codingandoutcome_codingfields from this CSV are directly interpolated into the generated R scripts' code blocks. - Ingestion points: The
batch_template_generator.Rscript reads the user-provided or database-derived combination matrix file. - Boundary markers: None identified. There are no explicit delimiters or instructions to ignore embedded code within the CSV fields.
- Capability inventory: The generated scripts have full access to the R environment, including file system access (
read.csv,write.csv) and potential shell execution. The skill is also grantedBashandWritetool access in its configuration. - Sanitization: No sanitization or validation is performed on the strings extracted from the CSV before they are injected into the R template. A malicious input in the
exposure_codingfield could potentially break out of the intended Rmutate()call and execute arbitrary commands. - [COMMAND_EXECUTION]: The skill workflow involves executing shell scripts (
run_all.sh) and R scripts that interact with the local file system and potentially other system resources to process large medical datasets.
Audit Metadata