matlab-analyze-dependencies
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for static analysis of MATLAB source code to generate dependency manifests. It identifies and reports on external files and missing products, which helps developers manage their software's security and portability.
- [DATA_EXPOSURE]: The skill accesses local environment variables (e.g.,
APPDATA) and system paths (e.g.,matlabroot) strictly to locate and verify the existence of MATLAB add-ons and products. This behavior is consistent with its primary purpose and does not involve exfiltration to external domains. - [COMMAND_EXECUTION]: The skill uses the platform's provided
evaluate_matlab_codetool to run dependency analysis. These commands are restricted to the MATLAB environment and are used to invoke built-in functions likematlab.codetools.requiredFilesAndProducts. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-controlled MATLAB files to extract function names and file paths. It mitigates injection risks by using specific regex patterns that avoid comments and by using the
mtreeparser, which separates code structure from textual content.
Audit Metadata