matlab-import-tracking-data
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious behavior or security vulnerabilities were detected. The skill is authored by MathWorks and operates within the expected MATLAB environment scope using standard toolkit functions.- [PROMPT_INJECTION]: The skill ingests untrusted data from user-provided files (CSV, XLSX, etc.) to infer data schemas and mappings, which represents an indirect prompt injection surface. This behavior is necessary for the skill's primary data-import function and is mitigated by the requirement for the agent to present inferred mappings to the user for confirmation before executing conversion code.\n
- Ingestion points: Data inspection steps in SKILL.md (Truth Pathway Step 2 and Sensor Pathway Step 3).\n
- Boundary markers: Not explicitly defined for external data ingestion.\n
- Capability inventory: MATLAB code execution via the evaluate_matlab_code tool.\n
- Sanitization: Relies on metadata inspection (column names) and user confirmation of proposed mappings.
Audit Metadata