matlab-use-vehicle-network
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The skill includes MATLAB P-code files (.p) in the scripts directory for diagnostic functions. These are pre-parsed binary files used by the platform vendor (MathWorks) for intellectual property protection. As these files originate from a recognized vendor and represent standard platform practice, they are considered safe.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves processing vehicle network traffic, which is an untrusted external data source.\n
- Ingestion points: Raw CAN and CAN FD frames are ingested via the
receivefunction and stored in MATLAB timetables (seereferences/can/receive.md).\n - Boundary markers: The instructions guide the agent to use provided diagnostic scripts (e.g.,
canTrafficOverview) to interpret traffic rather than extracting raw strings directly, which helps isolate the agent from potential instruction injections.\n - Capability inventory: The agent utilizes the
evaluate_matlab_codetool to run diagnostic scripts and interact with hardware interfaces, which is necessary for the skill's primary purpose.\n - Sanitization: The skill processes data primarily as structured numeric arrays and cell arrays of bytes, which reduces the surface area for text-based prompt injection attacks.\n- [DYNAMIC_EXECUTION]: The skill leverages the
evaluate_matlab_codetool to execute P-code diagnostic scripts. This is the intended behavior for troubleshooting vehicle network hardware and occurs within the controlled MATLAB environment.
Audit Metadata