denario
Warn
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation specifies several shell commands for system setup and operation, including package installation using
uvandpip, system-level package installation viasudo apt-get install texlive-full, and launching the application's graphical interface withdenario run. - [EXTERNAL_DOWNLOADS]: The skill references external resources for installation, including the official source repository on GitHub (
AstroPilot-AI/Denario) and a pre-configured Docker image (pablovd/denario) on Docker Hub. - [REMOTE_CODE_EXECUTION]: A core component of the skill is the 'Execution Agent,' which dynamically generates and runs Python code. As described in
references/research_pipeline.md, theden.get_results()method performs the actual computational work by executing code to conduct analyses, create visualizations, and compile findings. This dynamic code execution occurs at runtime within the user's environment. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. It ingests untrusted data through the
den.set_data_description()method (as seen inreferences/research_pipeline.md), which is then used by the 'Idea Agent' and 'Method Agent' to determine research goals and execution logic. There are no explicit boundary markers or sanitization processes mentioned to prevent malicious instructions within these descriptions from influencing the generated code execution in later stages.
Audit Metadata