simbiology-simulate-model
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes MATLAB code execution via the evaluate_matlab_code tool to perform model simulations, which is the core functionality and consistent with its scientific purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by processing model identifiers and parameter names. Ingestion points: modelId, parameter names, and dose levels in SKILL.md. Boundary markers: Absent; user-provided identifiers are interpolated into MATLAB commands. Capability inventory: MATLAB code evaluation. Sanitization: Absent; the skill assumes identifiers are valid SimBiology entities.
- [DYNAMIC_EXECUTION]: The skill involves dynamic code generation and compilation for performance. Evidence: createSimFunction in SKILL.md generates and compiles simulation objects at runtime. getModelByUUID.m uses dynamic field access to retrieve model handles from the sbioroot object.
Audit Metadata