matlab-write-tests
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied MATLAB code and requirements to generate test cases, creating a surface for indirect prompt injection.
- Ingestion points: The 'Workflow' section in
SKILL.mdexplicitly instructs the agent to gather requirements and code from the user to test. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the processed code are provided in the instructions.
- Capability inventory: The skill utilizes the
run_matlab_test_fileandevaluate_matlab_codetools (defined inmanifest.yaml) to execute the generated MATLAB code. - Sanitization: No explicit sanitization or validation of the user-provided code or requirements is mentioned before they are incorporated into the test generation process.
- [DYNAMIC_EXECUTION]: The skill generates MATLAB source files (
.mfiles) based on user requests and then executes them to verify test success. - Evidence: The 'Workflow' and 'Conventions' sections in
SKILL.mdinstruct the agent to write test files and then 'Run viarun_matlab_test_fileMCP tool to confirm tests pass.'
Audit Metadata