finding-simulink-examples

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [OBFUSCATION]: The file scripts/invokeModelFinder.p is a MATLAB P-code file. P-code is a standard, pre-parsed binary format used by MathWorks to distribute executable functions while protecting intellectual property, which prevents direct source code inspection.
  • [DYNAMIC_EXECUTION]: The skill instructions direct the agent to execute the invokeModelFinder.p script using the evaluate_matlab_code tool. This is the intended mechanism for the skill's search functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting user-supplied search queries and processing external database results, which are then returned to the agent's context.
  • Ingestion points: User-provided query and filters_json arguments in SKILL.md.
  • Boundary markers: The instructions advise the agent to present matches in a structured Markdown table, providing a level of output formatting.
  • Capability inventory: The skill utilizes evaluate_matlab_code to run the search script; the script itself performs a database search rather than a local file scan.
  • Sanitization: No explicit sanitization or filtering of the search results is mentioned in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 02:56 PM