petrinaut
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill facilitates the creation and storage of executable JavaScript and JSX code blocks within the Petri net document. These snippets define transition logic, stochastic rates, and custom SVG visualizations.\n
- Evidence: In
skill-api.ts, theaddPlace,addTransition, andaddDifferentialEquationmethods accept and store raw strings forvisualizerCode,lambdaCode, andcodefields.\n - Evidence:
SKILL.mdprovides examples of functional code meant to be embedded, such asexport default Lambda((tokens, params) => params.beta);.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes Petri net definitions from external Automerge URLs, which serves as an ingestion point for untrusted data that includes executable logic.\n - Ingestion points:
getPetriNet(url)inskill-api.tsloads documents from user-provided URLs.\n - Boundary markers: None. The skill does not differentiate between user-provided logic and logic loaded from an external document.\n
- Capability inventory: The agent can read, modify, and create Petri nets with logic fields. The logic is rendered in the tool's React component (
tool.tsx) via the@hashintel/petrinautlibrary.\n - Sanitization: The skill does not validate or sanitize the content of the code strings before they are persisted or processed.
Audit Metadata