synthetic-data
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates R and Python scripts at runtime based on user requirements and executes them locally using tools like Rscript or uv to produce synthetic datasets in CSV format. It also supports generating job submission scripts for high-performance computing (HPC) clusters.- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by ingesting variable definitions and experiment designs from user input and local files to parameterize code generation.
- Ingestion points: Reads variable names, types, and descriptions from user input and files such as docs/experiment-design.md or docs/pre-analysis-plan.md.
- Boundary markers: None; the skill does not specify delimiters or instructions to prevent interpretation of malicious strings within ingested data.
- Capability inventory: The agent can use Bash (uv, Rscript), Write, and Edit tools to generate and run code.
- Sanitization: No sanitization is described; however, the workflow includes a verification step to manually inspect dataset dimensions and statistics.
Audit Metadata