ophthal-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes scripts for environment verification and project scaffolding that execute system commands. Specifically,
scripts/selftest.Rusessystem2to run smoke tests of the scaffolding script andR CMD SHLIBto verify the C compiler on Windows.scripts/check_pandoc.pyusessubprocess.runto verify the version of the Pandoc executable. These are standard procedures for validating the analysis environment.\n- [EXTERNAL_DOWNLOADS]: Thescripts/selftest.Rscript fetches version information fromhttps://cloud.r-project.organdhttps://cran.r-project.orgto check for R and package updates. These are trusted official repositories for the R ecosystem.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes clinical data which constitutes an untrusted external input. It manages this risk through a phase-gated workflow that requires researcher approval at each step and by implementing data audits to identify inconsistencies before analysis.\n- [SAFE]: The skill implements best practices for clinical data security, including automated configuration of.gitignoreto ensure patient-level data remains on the local system and is not committed to version control.
Audit Metadata