simulink-explain-missing-coverage

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill demonstrates safe behavior, focusing on analytical tasks within the Simulink environment. It explicitly instructs the agent to separate analytical facts from reasoning-based recommendations, providing clear boundaries for the user.
  • [COMMAND_EXECUTION]: The skill executes local MATLAB P-code utility scripts (such as resolveCoverageData.p and detectDeadLogicObjectives.p) using the evaluate_matlab_code tool. These scripts are internal utilities for processing Simulink coverage data and formal analysis within the host environment.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to official MathWorks license documentation. MathWorks is a well-known vendor, and these references are considered safe.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes external Simulink coverage artifacts (.cvt files, cvdata objects). This risk is addressed by the skill's instructions to treat analytical results as facts and separate them from agent-generated judgment. The data entry point is in resolveCoverageData, and the skill's capabilities are limited to evaluate_matlab_code and model inspection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 07:50 PM