matlab-optimize-performance
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the
evaluate_matlab_codeandcheck_matlab_codetools to execute and validate MATLAB scripts. This is the core functionality required for its stated purpose of performance profiling and optimization. - Evidence: Found in
manifest.yamlunderrequired-toolsand demonstrated throughout the measurement templates inreferences/measurement-templates.md. - [DATA_EXFILTRATION]: The workflow includes templates that write performance data to the local file system using the MATLAB
savecommand. This is used to persist baseline measurements for later comparison and does not involve network exfiltration. - Evidence:
references/measurement-templates.mdcontains the commandsave('baseline.mat', 'baseline'). - [PROMPT_INJECTION]: The skill is designed to ingest and process user-provided MATLAB code (untrusted input) for profiling and optimization. While this presents an indirect prompt injection surface, the skill implements a 'Verify Correctness' step that requires the agent to compare the outputs of original and optimized code, serving as a functional safeguard against logic changes.
- Ingestion points: User functions are interpolated into the measurement scripts in
references/measurement-templates.md. - Boundary markers: Absent.
- Capability inventory: Uses
evaluate_matlab_codefor execution andsave/loadfor file operations. - Sanitization: Includes automated correctness checks using
assertand floating-point tolerance comparisons to ensure the behavior of the code remains consistent.
Audit Metadata