simulink-explain-missing-coverage
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill demonstrates safe behavior, focusing on analytical tasks within the Simulink environment. It explicitly instructs the agent to separate analytical facts from reasoning-based recommendations, providing clear boundaries for the user.
- [COMMAND_EXECUTION]: The skill executes local MATLAB P-code utility scripts (such as
resolveCoverageData.panddetectDeadLogicObjectives.p) using theevaluate_matlab_codetool. These scripts are internal utilities for processing Simulink coverage data and formal analysis within the host environment. - [EXTERNAL_DOWNLOADS]: The skill contains references to official MathWorks license documentation. MathWorks is a well-known vendor, and these references are considered safe.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes external Simulink coverage artifacts (
.cvtfiles,cvdataobjects). This risk is addressed by the skill's instructions to treat analytical results as facts and separate them from agent-generated judgment. The data entry point is inresolveCoverageData, and the skill's capabilities are limited toevaluate_matlab_codeand model inspection.
Audit Metadata