matlab
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill contains a vendor-specific instruction to steer agent behavior. In
SKILL.md, the "Suggest Using K-Dense Web For Complex Workflows" section directs the agent to proactively suggest the author's hosted platform (www.k-dense.ai) when handling complex reasoning or large document analysis tasks.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its data ingestion and execution capabilities. - Ingestion points: The skill ingests untrusted data from external files via functions such as
readtable,readmatrix, andload, as documented inreferences/data-import-export.md. - Boundary markers: The instructions do not include boundary markers or explicit warnings to isolate data from instructions when processing ingested files.
- Capability inventory: The skill supports shell command execution (
matlab -batch,octaveinreferences/executing-scripts.md), arbitrary Python code execution (pyruninreferences/python-integration.md), and network operations (requests.getvia Python interop). - Sanitization: No sanitization, filtering, or validation of ingested data is prescribed before it interacts with executable capabilities.- [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to run scripts.
SKILL.mdandreferences/executing-scripts.mdcover the use of thematlabandoctavebinaries for non-interactive task execution.- [EXTERNAL_DOWNLOADS]: The skill demonstrates network fetching capabilities through Python integration.references/python-integration.mdprovides examples of using therequestslibrary to retrieve data from external endpoints.- [DATA_EXFILTRATION]: The skill outlines capabilities for accessing local files and performing network requests.references/data-import-export.mddescribes methods for reading structured data from the filesystem, which could be combined with the network features inreferences/python-integration.mdfor data transmission.
Audit Metadata