simulink-test-sequence-from-ears
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Simulink Requirements (.slreqx) files, which could contain unvalidated text. This is handled by
collectSkillContext.mandparseEARSPattern.m. - Ingestion points: Requirement descriptions and summaries are extracted from
.slreqxfiles using theslreqAPI. - Boundary markers: The skill architecture mandates a manual YAML mapping review in Phase 1. The agent is instructed to wait for explicit user approval before proceeding to Phase 2 (generation).
- Capability inventory: The skill uses
sltest.harness.createto create test environments andsltest.testsequenceAPIs to modify test logic. It also usessave_systemto write to the local filesystem. - Sanitization: The
extractRequirementTextfunction incollectSkillContext.mremoves HTML tags from requirement descriptions. - [DYNAMIC_EXECUTION]: The skill dynamically constructs MATLAB code blocks for Simulink Test Sequences by combining requirement phrases with model signal mappings.
- Evidence: Configurator scripts such as
configureEventDriven.m,configureStateDriven.m, andconfigureUbiquitous.musesprintfto assemble MATLAB code strings for the 'Action' field of test steps, which are later executed within the Simulink simulation environment.
Audit Metadata