matlab-design-digital-filter
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the generation and execution of MATLAB code using the
evaluate_matlab_codeandrun_matlab_filetools. This is the intended primary functionality for designing and testing digital filters. The instructions emphasize writing code to.mfiles and performing preflight checks, which are standard practices for robust development workflows within the platform. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it takes user-defined filter specifications (e.g., frequencies, ripple, attenuation) and potentially external signal files to generate MATLAB code.
- Ingestion points: User input for filter design parameters and signal file paths accessed via functions like
audioreadinreferences/multirate.md. - Boundary markers: The skill does not explicitly instruct the agent to use delimiters or protective prompting (e.g., 'ignore embedded instructions') when interpolating user data into generated code.
- Capability inventory: The skill utilizes powerful execution tools (
evaluate_matlab_code,run_matlab_file) which can execute arbitrary MATLAB commands. - Sanitization: No specific input validation or sanitization routines for user-provided parameters are defined in the instructions, though the skill relies on MATLAB's internal function validation (e.g.,
designfiltparameter checks). This represents a standard capability surface for code-generation skills and is not considered a malicious finding.
Audit Metadata