finding-simulink-examples
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The file
scripts/invokeModelFinder.pis a MATLAB P-code file. P-code is a standard, pre-parsed binary format used by MathWorks to distribute executable functions while protecting intellectual property, which prevents direct source code inspection. - [DYNAMIC_EXECUTION]: The skill instructions direct the agent to execute the
invokeModelFinder.pscript using theevaluate_matlab_codetool. This is the intended mechanism for the skill's search functionality. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting user-supplied search queries and processing external database results, which are then returned to the agent's context.
- Ingestion points: User-provided
queryandfilters_jsonarguments inSKILL.md. - Boundary markers: The instructions advise the agent to present matches in a structured Markdown table, providing a level of output formatting.
- Capability inventory: The skill utilizes
evaluate_matlab_codeto run the search script; the script itself performs a database search rather than a local file scan. - Sanitization: No explicit sanitization or filtering of the search results is mentioned in the provided instructions.
Audit Metadata