stata-c-plugins
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download the official Stata SDK (
stplugin.handstplugin.c) from the well-known vendor domainhttps://www.stata.com/plugins/. This is a necessary and standard practice for developing Stata extensions. - [COMMAND_EXECUTION]: The skill includes Python scripts and Makefiles designed to automate the compilation of plugin source code using standard development tools like
gcc,g++, andmake. These commands are essential for the primary purpose of building binary plugins for multiple operating systems. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting data from Stata datasets into a C/C++ environment for statistical processing. While this creates a data ingestion surface, the context is focused on numerical calculations, and the use of safe string formatting like
snprintfin provided examples reduces risks associated with processing untrusted data.
Audit Metadata