manage-safety-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
evaluate_matlab_codeto interact with the MATLAB environment. It also provides APIs likesetCallbackandsetColumnFormulathat allow for the definition of MATLAB code strings to be stored and executed as callbacks or formulas within Safety Analysis Manager documents. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes data from external files and models. 1. Ingestion points: Data enters the agent context through
model_read,safetyAnalysisMgr.openDocument, andsafetyAnalysisMgr.import. 2. Boundary markers: Instructions emphasize grounding the analysis in the actual model structure or requirements text. 3. Capability inventory: The skill can execute MATLAB commands viaevaluate_matlab_codeand perform file writes viasaveandexportfunctions. 4. Sanitization: No explicit sanitization of ingested content is described in the provided files. - [SAFE]: The skill includes a pre-compiled MATLAB P-code script (
scripts/fileType.p) for document type verification. This is a standard vendor-authored helper script and is considered a legitimate component of the skill's functionality.
Audit Metadata