simulink-control-motors
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied data to configure complex engineering models and execute simulations, creating an inherent attack surface.
- Ingestion points: The skill takes motor parameters (e.g., stator resistance, inductances, flux linkage) and application requirements as input from the user (documented in
references/design/beginner-path.mdandreferences/common/detailed-workflows.md). - Boundary markers: The instructions do not define clear boundary markers or delimiters for user-provided strings when they are interpolated into block parameters or MATLAB commands.
- Capability inventory: The skill utilizes powerful tools such as
evaluate_matlab_codeto run simulations andmodel_editto structurally modify Simulink models based on user specifications. - Sanitization: There are no explicit instructions for the agent to sanitize or validate the content of user-provided strings (such as motor names or workspace variable expressions) before they are processed by the underlying tools.
Audit Metadata