sim
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates user-supplied input from the
$ARGUMENTSplaceholder directly into the execution context of the simulation without sanitization. - Ingestion points: User input enters via the
$ARGUMENTSvariable defined inSKILL.md. - Boundary markers: The input is not wrapped in delimiters or accompanied by instructions to ignore embedded commands, which could allow a user to influence agent behavior or execution flow.
- Capability inventory: The skill uses
allowed-toolsincludingBash(for python, cd, and uv) andReadoperations. - Sanitization: No input validation or escaping mechanisms are described to ensure the arguments are restricted to safe flags or scenario names.
- [COMMAND_EXECUTION]: The skill executes shell commands via
uvto navigate directories, synchronize dependencies, and run the Python simulation script (src/main.py).
Audit Metadata