mat-xrd-digitizer
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local Python script
scripts/digitize_plot.pyto generate simulated XRD profiles. The script performs mathematical modeling (Pseudo-Voigt profiles) using NumPy and generates visualizations using Matplotlib. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or downloads of untrusted scripts were found. All execution is restricted to the local environment using provided scripts.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or attempts to access sensitive system files (e.g., .ssh, .aws) were detected in the instructions or code.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override agent behavior, bypass safety filters, or extract system prompts. The 'CRITICAL' instruction in SKILL.md is a data-quality directive for the VLM to ensure thorough peak extraction.
- [DATA_EXFILTRATION]: No network operations or suspicious data transfer patterns were identified. The skill operates on user-provided images and generates local .xy and .png files.
- [SAFE]: The skill's behavior is consistent with its stated purpose as a scientific data processing tool for materials science research.
Audit Metadata