matlab-import-export-vehicle-data
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external vehicle network log files and database definitions which are untrusted data sources.
- Ingestion points: Data enters the agent context through functions such as
blfread,mdfRead,canSignalImport,canMessageImport, andfileread(inSKILL.mdfor DBC parsing). - Boundary markers: The instructions lack explicit delimitation or warnings to treat metadata (like signal names or message descriptions) as untrusted content when the agent processes the resulting MATLAB timetables.
- Capability inventory: The execution environment includes capabilities for MATLAB code evaluation and file system writes (
blfwrite,mdfWrite). - Sanitization: While the skill uses
matlab.lang.makeValidNameto ensure data conforms to MATLAB variable naming rules, it does not specifically sanitize content to prevent prompt injection if the agent summarizes or acts upon signal metadata.
Audit Metadata