matlab-migrate-settings
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied MATLAB files (
.m) to identify settings paths. This creates an ingestion point for untrusted data that could potentially contain malicious instructions. - Ingestion points: User-provided
.mscript files identified in the<script-path>argument. - Boundary markers: None specified for the input script content.
- Capability inventory: Shell command execution (grep, strings, find), file system writes, and MATLAB code evaluation.
- Sanitization: The skill employs targeted parsing and transformation logic specifically for MATLAB settings paths rather than executing the input directly during analysis.
- [DYNAMIC_EXECUTION]: As part of its mandatory validation phase, the skill generates a migrated version of the input script and executes it in the target MATLAB environment using the
evaluate_matlab_codetool or shell commands (matlab -batch) to ensure the changes are valid. - [COMMAND_EXECUTION]: The skill uses various shell utilities including
grep,strings,find, andlsto search MATLAB installation directories and extract configuration metadata from system binaries (.so,.dll) and source headers (.hpp).
Audit Metadata