create-sdi-run
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for the MATLAB environment, including verification of signal counts after import operations and requesting user consent for destructive actions like clearing all runs in the Simulation Data Inspector.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data from MAT, CSV, and Excel files, which constitutes a standard surface for indirect prompt injection. 1. Ingestion points: External file paths like 'logs/bench_run.csv' and 'data/two_runs.xlsx' referenced in instructions. 2. Boundary markers: None present. 3. Capability inventory: Use of 'evaluate_matlab_code' tool to execute MATLAB commands. 4. Sanitization: Relies on built-in MATLAB functions such as readmatrix and Simulink.sdi.createRun for parsing and validation.
- [DYNAMIC_EXECUTION]: The skill generates MATLAB code strings at runtime based on user-provided parameters to be executed via the 'evaluate_matlab_code' tool. This is the primary intended function of the skill and uses standard, non-obfuscated API calls for safety.
Audit Metadata