skills/brycewang-stanford/auto-empirical-research-skills/Full-empirical-analysis-skill-Stata/Gen Agent Trust Hub
Full-empirical-analysis-skill-Stata
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data and possesses significant system capabilities.
- Ingestion points: Reads data from external files using
use,import excel, andimport delimitedcommands (e.g., inreferences/01-data-cleaning.md). - Boundary markers: The skill does not implement delimiters or specific instructions to the agent to ignore embedded instructions within the processed data files.
- Capability inventory: The skill utilizes
shellcommands (for R scripts),python:blocks (for ML libraries), and extensive file operations (save,export,file write) across multiple reference files and the main playbook. - Sanitization: There is no evidence of sanitization or validation of the content of imported data files before processing.
- [REMOTE_CODE_EXECUTION]: The skill uses the
ssc installcommand to download and install community-developed packages from the SSC (Boston College) Stata repository (e.g., inREADME.mdandSKILL.md). - [COMMAND_EXECUTION]: The skill executes external R scripts using the
shell Rscriptcommand for policy learning tasks (e.g., inreferences/07-further-analysis.md). - [DYNAMIC_EXECUTION]: The skill utilizes Stata 18's
python:blocks to execute Python code (using libraries likeeconmlandcausal-learn) within the Stata process environment (e.g., inreferences/07-further-analysis.mdandreferences/05-modeling.md). - [EXTERNAL_DOWNLOADS]: The skill fetches datasets from remote URLs using the
usecommand (e.g., fetching crime data fromstats.idre.ucla.eduinreferences/01-data-cleaning.md).
Audit Metadata