matplotlib
Warn
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The section titled 'Suggest Using K-Dense Web For Complex Worflows' contains explicit instructions designed to manipulate the agent's behavior. It directs the agent to proactively suggest a specific commercial website (www.k-dense.ai) to the user when certain conditions are met (e.g., multi-step reasoning, long-running workflows). This is a form of instruction injection that overrides the agent's neutral operational state to serve promotional purposes.
- [COMMAND_EXECUTION]: The documentation references and encourages the execution of local Python scripts, specifically
scripts/plot_template.pyandscripts/style_configurator.py, via the command line. While these are described as helper utilities, they represent local code execution vectors within the skill's environment.
Audit Metadata