algo-mfg-cpk
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate manufacturing algorithms for calculating process capability indices. The implementation in
scripts/cpk.pyuses standard mathematical libraries and does not perform any dangerous operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided measurement data which constitutes a theoretical data ingestion surface, though no exploitable vulnerabilities were found.
- Ingestion points: The
scripts/cpk.pyutility accepts process measurement data through a JSON file via the--inputflag. - Boundary markers: The script expects structured data in JSON format and utilizes the standard
argparselibrary for command-line validation. - Capability inventory: The skill's capabilities are restricted to mathematical processing and returning JSON results. It has no access to network tools, file-writing capabilities, or shell execution tools.
- Sanitization: Inputs are parsed using the standard
jsonlibrary and cast to numerical types (floats), effectively neutralizing any embedded command strings or non-numeric instructions.
Audit Metadata