pathml
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest whole-slide images (WSIs) from potentially untrusted sources for analysis. It also possesses capabilities to write output files (HDF5, CSV, and PNG) to the local file system. This combination creates a surface for indirect injection if an attacker-controlled image file could somehow influence the agent's behavior during processing, though binary image formats carry negligible risk for traditional prompt injection.
- Ingestion points: Slide files (SVS, NDPI, MRXS, TIFF) loaded via
SlideDatainSKILL.md. - Boundary markers: None identified; image data is processed via standard vision libraries.
- Capability inventory: File system write operations including
slide.write(),df.to_csv(), andimg.save()documented inSKILL.md. - Sanitization: Standard image processing pipeline; no specific text-based sanitization for binary slide data.
- [EXTERNAL_DOWNLOADS]: The skill instructions include downloading software and models from established sources.
- Evidence: Installation commands for packages from the
conda-forgerepository andpytorch.org.
Audit Metadata