matlab-fit-curve
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill contains behavioral instructions (Rule 10) directing the AI agent to hide internal mechanics, such as controller method names and reference file paths, from the user. This is a user-experience design choice for agentic interaction.
- [DATA_EXFILTRATION]: The skill identifies surfaces for data processing and potential indirect prompt injection by reading from and writing to the local MATLAB workspace and file system.
- Ingestion points: Workspace variables accessed via methods like selectFittingXData in CurveFitterAppController.
- Boundary markers: Not present.
- Capability inventory: Execution of MATLAB code through evaluate_matlab_code, file system access for .sfit sessions, and workspace variable modification.
- Sanitization: No explicit validation or filtering logic for workspace data is defined in the instruction files.
- [SAFE]: The skill includes pre-parsed MATLAB scripts (scripts/CurveFitterAppController.p and scripts/getFittypeTable.p) which are non-human-readable. These files are standard vendor-distributed components from MathWorks (matlab) and are used as intended for application control.
Audit Metadata