data-scientist
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/detect-compute.pyutility uses thesubprocessmodule to probe system hardware and software capabilities. It executes standard commands such asnvidia-smi,nvcc,sysctl, anddfto identify available VRAM and CPU resources. These operations are performed using list-based arguments without the shell, minimizing injection risks, and are necessary for the skill to self-constrain its machine learning recommendations based on available compute. - [DYNAMIC_EXECUTION]: The statistical utilities
scripts/model-comparison.pyandscripts/assumption-diagnostics.pyutilize thestatsmodelslibrary to fit models based on R-style formulas provided as input. This enables the agent to perform flexible regression analyses on user-provided data. While this represents a dynamic evaluation surface, it is a standard implementation for statistical tooling in data science environments. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data (CSV files) and user-provided statistical formulas.
- Ingestion points: Data entering via
scripts/assumption-diagnostics.py,scripts/model-comparison.py, andscripts/experimental-design.pyusing the--dataflag. - Boundary markers: The skill relies on standard CSV parsing via
pandasand formula parsing viapatsy(internal tostatsmodels). - Capability inventory: The skill possesses capabilities for subprocess execution (hardware probing) and file writing (exporting randomization schedules).
- Sanitization: The skill follows standard library practices for data ingestion and provides comprehensive documentation in
references/docker-experiment-isolation.mdandreferences/subagent-experiment-supervision.mdregarding safe execution and resource limits.
Audit Metadata