analytical-method-validation
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration vectors were detected in the skill's instructions or scripts.
- [PROMPT_INJECTION]: The skill processes external data (CSV, TSV, JSON) which constitutes an indirect prompt injection surface.
- Ingestion points: Data is ingested via the
--inputargument in analysis scripts (e.g.,check_response.py,check_accuracy_precision.py). - Boundary markers: The scripts output statistical results in text tables or JSON without explicit delimiters.
- Capability inventory: The agent can execute Python scripts via Bash and perform file operations.
- Sanitization: Input values intended for statistical calculation are converted to floats with robust error handling. String-based identifiers (such as group labels) are treated as literal data, minimizing the risk of the agent interpreting them as instructions.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool as intended to run local Python analysis scripts. These operations are limited to the standard library and do not involve shell injection vulnerabilities.
Audit Metadata