13c-metabolic-flux
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill setup involves downloading the
mfapypackage from an external Git repository during installation. - Evidence: Both
SKILL.mdandassets/requirements.txtpoint tohttps://github.com/fumiomatsuda/mfapy.gitat a specific commit hash. - [DYNAMIC_EXECUTION]: The underlying
mfapyengine dynamically generates and executes numerical functions to solve metabolic flux equations based on the provided network model. - Evidence:
scripts/_mfa_model.pydocuments this internal behavior and includes verification logic (hasattr(self._engine, "func")) for the generated numerical functions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests scientific model and measurement data from JSON files, creating a potential attack surface for indirect prompt injection if malicious instructions were embedded in metadata or strings.
- Ingestion points:
model.jsonandmeasurements.jsonare loaded and processed inscripts/mfa.py. - Boundary markers: The skill does not use explicit boundary markers or "ignore instructions" warnings in the processing logic for external data.
- Capability inventory: The skill scripts are restricted to local data processing, optimization via SciPy, and file writing. No shell execution or network operations are performed by the scripts themselves.
- Sanitization: The skill mitigates risks by validating all identifiers (metabolites, reactions, fragments) against a strict alphanumeric regex (
[A-Za-z][A-Za-z0-9]{0,39}) before they are passed to the numerical modeling engine.
Audit Metadata