The Agent Skills Directory

[OBFUSCATION]: The file scripts/executeLiveScript.p is a MATLAB P-file, which is a pre-parsed and obfuscated format. This prevents auditing of the script's internal logic and behavior, posing a risk as the code is opaque to security review.
[DYNAMIC_EXECUTION]: The skill executes the executeLiveScript.p script to modify and rewrite live script files on the host system. Executing obfuscated scripts that perform file operations is a significant capability that cannot be verified for safety.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and converting .m and .mlx files, which provides an entry point for indirect prompt injection if those files contain malicious instructions.
Ingestion points: Loading and processing of existing MATLAB scripts from the environment (SKILL.md).
Boundary markers: The skill lacks explicit instructions to treat file content as untrusted or to ignore instructions embedded within the scripts.
Capability inventory: The skill utilizes evaluate_matlab_code and a script (executeLiveScript.p) with file-writing privileges.
Sanitization: No sanitization or validation mechanisms are described for the content being read from external files.

matlab-create-live-script