mathmodel-figure-templates

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/render_template.py utility uses subprocess.run to execute Python plotting scripts. The executed files are internal templates bundled with the skill, used to generate visualization artifacts as part of its primary functionality.
  • [DYNAMIC_EXECUTION]: The skill manages the lifecycle of visualization generation by copying internal scripts from its scripts/templates/ directory to a user-defined project folder and executing them. The process includes input normalization via regex (re.sub(r"[^a-z0-9\-]+", "-", value)) and validation against a hardcoded whitelist of supported template IDs, ensuring that only intended scripts are executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 06:07 AM