checking-model-compliance
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill performs an 'Agentic Review' of Simulink models where the LLM evaluates semantic guidelines based on model data.
- Ingestion points: Model metadata, block names, and parameter values are ingested from
.slxfiles usingmodel_readandmodel_query_paramsas described inreferences/uncheckable-guidelines-review.md. - Boundary markers: The skill uses reporting templates and note blocks to separate analysis, but does not employ strict delimiters for raw model data during the evaluation process.
- Capability inventory: The skill has high-privilege capabilities including
model_edit(to modify model structure and parameters) andevaluate_matlab_code(to execute arbitrary MATLAB scripts). - Sanitization: No explicit sanitization or escaping of model-derived strings is mentioned. The risk is partially mitigated by instructions requiring user confirmation before applying any changes in 'Fix Mode'.
- [COMMAND_EXECUTION]: The skill uses
evaluate_matlab_codeto run local MATLAB scripts located in thescripts/directory. These scripts (model_advisor_run.p, etc.) are P-coded (MATLAB's protected format), which is standard for MathWorks-distributed tools but limits transparency into the exact command execution logic.
Audit Metadata