skills/bsene/skills/ocaml/Gen Agent Trust Hub

ocaml

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate technical instructions for OCaml programming and project management. It includes guidance on type inference, functional programming idioms, and error handling.\n- [EXTERNAL_DOWNLOADS]: The skill references reputable external sources, such as the Cornell CS 3110 textbook and community-standard GitHub repositories for testing and quality tools (QCheck, Mutaml, Camelot). These are well-known resources in the OCaml ecosystem.\n- [COMMAND_EXECUTION]: The skill details the use of standard OCaml development tools, including dune for building and executing projects and opam for package management. These commands are consistent with the skill's primary purpose of assisting with OCaml development.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and debug user-provided OCaml code, creating an ingestion surface for untrusted data. However, this surface is fundamental to the skill's purpose as a coding assistant, and there are no associated high-risk capabilities like arbitrary network exfiltration or sensitive file access.\n
  • Ingestion points: User-provided OCaml source files, dune project configurations, and error logs.\n
  • Boundary markers: None explicitly defined in instructions.\n
  • Capability inventory: dune build, dune exec, ocamlc, and opam exec are used for project management and analysis.\n
  • Sanitization: Standard compiler and build system validation is expected at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 11:56 AM
Security Audit — agent-trust-hub — ocaml