evomath-tao
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill uses local file operations for workspace management and mathematical reasoning state.
- [COMMAND_EXECUTION]: The skill uses the
executetool to run its own bundled Python script (evomath_workspace.py) for workspace validation and may generate local scripts for mathematical verification (e.g., using SymPy), which is consistent with its stated purpose of mathematical research and proof. - [PROMPT_INJECTION]: The instructions establish a strict procedural framework to ensure mathematical rigor and prevent hallucination, without any attempts to bypass model safety filters or override system instructions.
- [DATA_EXFILTRATION]: No network access or sensitive file operations are present. Memory persistence is limited to a local JSON file within the skill's workspace (
.evomath/session-memory.json), following standard practices for state management. - [REMOTE_CODE_EXECUTION]: No patterns for downloading or executing remote code from untrusted sources were identified. All script execution is limited to local files included with the skill or generated for the primary mathematical purpose.
Audit Metadata