skills/lebsral/dspy-programming-not-prompting-lms-skills/dspy-bootstrap-few-shot/Gen Agent Trust Hub
dspy-bootstrap-few-shot
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The code samples and instructional text are consistent with legitimate use of the DSPy library for model optimization.- [PROMPT_INJECTION]: The skill demonstrates how to process training datasets to generate and select few-shot demonstrations. This architectural pattern represents a surface for indirect prompt injection if the datasets provided by the user contain adversarial instructions.
- Ingestion points: Training examples (
trainset) and evaluation examples (devset) inSKILL.mdandexamples.md. - Boundary markers: None identified; inputs are treated as standard data objects.
- Capability inventory: The skill uses
dspy.LMto communicate with language models andoptimized_qa.save()to write the resulting program state to local storage. - Sanitization: No sanitization or input filtering is demonstrated in the examples; the process assumes trusted input data.
Audit Metadata