simpy
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes dynamic method patching, commonly known as monkey-patching, to implement resource monitoring features. Evidence includes the ResourceMonitor class in scripts/resource_monitor.py, which replaces methods like request and release on SimPy resource objects at runtime. Documentation in references/monitoring.md also outlines methods for patching the simulation environment's step function to trace events.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied configuration for simulation models, creating a vulnerability surface. 1. Ingestion points: Simulation parameters (e.g., arrival_rate, service_time_mean) are ingested by the SimulationConfig class in scripts/basic_simulation_template.py. 2. Boundary markers: None. 3. Capability inventory: The skill has local file-write capabilities in scripts/resource_monitor.py (CSV export) but lacks network or system-level execution capabilities. 4. Sanitization: None.
- [METADATA_POISONING]: There is a discrepancy in the author metadata. The SKILL.md file attributes the skill to K-Dense Inc., while the platform context identifies the author as eturkes.
Audit Metadata