statspai-analysis
Warn
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
validate_api_claims.pyimplements a validation harness that extracts Python code blocks from Markdown documentation files (such asreferences/verified-skeleton.md) and executes them using theexec()function. The script compiles documentation strings at runtime and runs them within a controlled environment to verify API signatures and return shapes. - [DYNAMIC_EXECUTION]: The
validate_api_claims.pyscript utilizesimportlib.import_module()to dynamically load decomposition worker modules at runtime based on entries in a registry. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided DataFrames across multiple workflows (Econ, Epi, and ML-Causal). It also incorporates LLM-assisted features like
sp.llm_dag_proposefor causal structure discovery, which creates a surface where malicious data content or untrusted LLM outputs could influence the agent's behavior. - Ingestion points: DataFrames are loaded and processed in
pipeline-econ.md,pipeline-epi.md, andpipeline-ml-causal.md. - Boundary markers: No explicit boundary markers or 'ignore' instructions for data ingestion are documented.
- Capability inventory: The skill possesses capabilities for local file writing (Word, Excel, LaTeX), shell command execution (via the validation script), and external LLM interactions.
- Sanitization: There is no evidence of explicit sanitization or filtering of input data before it is processed by the statistical estimators or passed to LLM-based discovery tools.
Audit Metadata