reproducible-ecology-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a script (scripts/check_packages.R) that installs R packages from the official Comprehensive R Archive Network mirror (https://cloud.r-project.org). This is a trusted and well-known service.
- [PROMPT_INJECTION]: The skill processes user-provided inputs such as project names and directory paths, creating a surface for potential indirect prompt injection. 1. Ingestion points: Arguments provided to scripts/init_project.sh and scripts/generate_file_manifest.py. 2. Boundary markers: Not utilized; inputs are interpolated into shell commands and filesystem operations. 3. Capability inventory: Execution of shell commands, file writing, and directory creation. 4. Sanitization: The scripts do not implement internal filtering or validation of the input strings.
Audit Metadata