state-space-kalman
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides legitimate mathematical utility for latent-factor filtering. The logic is transparent and confined to the provided local scripts.
- [COMMAND_EXECUTION]: The skill uses the
pythontool to executescripts/state_space_kalman_diagnostics.py. This is used to perform deterministic statistical calculations on user-provided data and is consistent with the skill's stated purpose. - [PROMPT_INJECTION]: The skill processes external data, which presents a surface for indirect prompt injection.
- Ingestion points: Untrusted data is loaded from a CSV file using
pandas.read_csvinscripts/state_space_kalman_diagnostics.py. - Boundary markers: There are no specific delimiters or instructions defining the boundary between data and instructions in the processing workflow.
- Capability inventory: The skill can read local files, execute Python code, and write JSON output to the filesystem.
- Sanitization: The script performs strict numeric sanitization by coercing data columns to numeric types and discarding non-numeric values, effectively neutralizing non-numeric injection attempts within the data fields. Column names are retrieved but not sanitized.
Audit Metadata