experiment-stats
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill logic is implemented in pure Python using only standard library modules (math, random, json). It contains no hardcoded credentials, network exfiltration patterns, or persistence mechanisms.
- [COMMAND_EXECUTION]: The testing script
scripts/test_ab_stats.pyutilizessubprocess.runto execute the primaryab_stats.pyscript against known fixtures. This execution is confined to the local environment and uses the system's current Python interpreter to call an internal script, representing standard and secure software testing practices. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external experiment data via JSON files or standard input. It mitigates potential data-driven attacks by implementing strict validation logic in
scripts/ab_stats.py, including schema verification invalidate_inputand value-type checking in_validate_binaryto ensure input consistency before performing calculations.
Audit Metadata