abaqus-static-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent ingests untrusted user data (geometry dimensions, material properties, support/load descriptions) which is intended to be used as parameters for Abaqus-related tasks involving shell commands and file writing.
- Ingestion points:
SKILL.mddefines "Required Information" including dimensions, material names, support types, and load magnitudes provided by the user. - Boundary markers: The skill does not define specific delimiters or instructions for the agent to treat these inputs as data rather than potential instructions.
- Capability inventory: The skill frontmatter allows access to
Bash(abaqus:*),Write,Edit,Read,Glob, andGreptools. - Sanitization: The instructions lack any guidance on validating, escaping, or filtering user-provided parameters before they are interpolated into scripts or commands.
- [METADATA_POISONING]: The skill contains conflicting information regarding its source and authorship.
- Evidence:
UPSTREAM.mdattributes the source to a repository bymajiayu000, whilemetadata.jsonattributes the author and source toJaimeCernuda. Furthermore, the environment context identifies the author ascai-aa. These inconsistencies, while potentially stemming from repository forks, obscure the authoritative provenance of the skill instructions.
Audit Metadata