experiment-tracking-swanlab
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could potentially contain malicious instructions, though the risk is minimal given the intended use case.
- Ingestion points: The skill ingests user-provided text and captions through the
swanlab.logfunction, specifically usingswanlab.Textand thecaptionparameter for media objects inSKILL.mdandreferences/visualization.md. - Boundary markers: No specific delimiters or instructions (e.g., "ignore embedded instructions") are used to isolate logged text or captions from the agent's control logic.
- Capability inventory: The skill possesses network communication capabilities through the
swanlablibrary to transmit logs and uses shell commands for CLI operations such asswanlab login,swanlab watch, andswanlab syncinSKILL.md. - Sanitization: The provided examples do not include explicit sanitization or validation of the text content or captions before they are passed to the logging API.
- [EXTERNAL_DOWNLOADS]: The skill manages legitimate software dependencies from standard registries.
- Fetches and installs official packages including
swanlab,pillow, andsoundfileusingpip. - References standard machine learning frameworks such as
transformers,pytorch-lightning, andfastaifor integration. - [COMMAND_EXECUTION]: The skill utilizes command-line tools for experiment management.
- Employs the
swanlabCLI for authentication (swanlab login), local dashboard monitoring (swanlab watch), and data synchronization (swanlab sync) inSKILL.md.
Audit Metadata