paper-matrix-builder
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to run a bundled Python script (
build_sota_matrix.py) to process extraction data. The script uses only standard Python libraries (argparse, csv, json, os, sys) to aggregate data into Markdown and CSV files.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external JSON files which represents a potential attack surface. Ingestion points: JSON files in theextractions/directory. Boundary markers: Instructions explicitly mandate using 'tidak dilaporkan' for missing data to maintain integrity. Capability inventory: Execution of a local Python script for file generation. Sanitization: The script performs basic string formatting and newline removal for table compatibility.
Audit Metadata