factor-research
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data through a CSV ingestion point in the diagnostics script.
- Ingestion points: The
scripts/factor_research_diagnostics.pyscript reads user-provided files usingpandas.read_csv. - Boundary markers: The script generates structured JSON output, which provides a clear separation between analyzed data and agent instructions.
- Capability inventory: The skill has permissions to read and write files and execute local scripts within the agent environment.
- Sanitization: The script enforces a specific schema and coercively converts input data to numeric types via
pd.to_numeric(..., errors='coerce'), which effectively neutralizes non-numeric injection payloads. - [COMMAND_EXECUTION]: The skill utilizes a local Python script
scripts/factor_research_diagnostics.pyto perform data analysis. The script's operations are limited to deterministic statistical calculations and follow safe practices for handling command-line arguments and file output.
Audit Metadata