dspy-utils
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation recommends installing the
dspy[mcp]package viapipto enable Model Context Protocol support. - [COMMAND_EXECUTION]: The instructions for MCP integration demonstrate how to initialize local servers using
StdioServerParameters, which involves executing local commands or scripts (e.g.,python path/to/your/mcp_server.py) to establish a subprocess-based communication session. - [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface through the processing of external data in DSPy modules.
- Ingestion points: Untrusted data enters the agent context via input fields like
questionin the streaming example andticket_textin the classification module (SKILL.md, examples.md). - Boundary markers: The skill documentation notes the use of
ChatAdapterdelimiters (e.g.,[[ ## field_name ## ]]) to separate fields within the LM prompt (SKILL.md). - Capability inventory: The skill has the capability to perform local file read/write operations for state persistence via
saveandloadmethods and to execute subprocesses for MCP server sessions (SKILL.md). - Sanitization: No explicit input sanitization or validation logic is detailed in the provided code snippets, relying instead on framework-level markers.
Audit Metadata