matlab-optimize-gpu-codegen
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The file
scripts/extractDiagnostics.pis a MATLAB P-code file, which is an opaque binary format that prevents static security analysis of the logic used to extract diagnostics from profiling reports. - [DYNAMIC_EXECUTION]: The skill dynamically executes generated MEX binaries using the
fevalfunction inscripts/benchmarkMex.mto perform performance benchmarking and numerical verification. - [COMMAND_EXECUTION]: The skill invokes the
codegencommand to compile user-provided MATLAB design files into CUDA-based MEX or library targets, which involves executing a build process on potentially untrusted source code. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes user-supplied MATLAB files and data, creating a surface for indirect prompt injection where malicious instructions could attempt to influence the agent's optimization or diagnostic-fix logic.
- Ingestion points: User-provided MATLAB design files and input data resolved in
SKILL.md(Step 1c). - Boundary markers: The skill does not use explicit boundary markers or delimiters when processing user-provided code, relying instead on numerical equivalence checks against the original file.
- Capability inventory: The skill uses
codegenfor compilation,benchmarkMexfor execution, andgpuPerformanceAnalyzerfor profiling. - Sanitization: No sanitization or validation is applied to the user-provided code or input values before they are passed to the compilation and execution tools.
Audit Metadata