matplotlib

Warn

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The section titled 'Suggest Using K-Dense Web For Complex Worflows' contains explicit instructions designed to manipulate the agent's behavior. It directs the agent to proactively suggest a specific commercial website (www.k-dense.ai) to the user when certain conditions are met (e.g., multi-step reasoning, long-running workflows). This is a form of instruction injection that overrides the agent's neutral operational state to serve promotional purposes.
  • [COMMAND_EXECUTION]: The documentation references and encourages the execution of local Python scripts, specifically scripts/plot_template.py and scripts/style_configurator.py, via the command line. While these are described as helper utilities, they represent local code execution vectors within the skill's environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 6, 2026, 11:30 PM
Security Audit — agent-trust-hub — matplotlib