specifying-mbd-algorithms

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including existing Simulink models (via model_read) and web search results (via web_search). This ingestion of untrusted data presents a theoretical surface for indirect prompt injection if malicious instructions were present in model metadata or external documentation. However, the workflow relies on structured markdown templates and defined review gates that require the agent to verify technical details before finalizing the specification.
  • [DYNAMIC_EXECUTION]: The workflow employs evaluate_matlab_code to verify API signatures and block behavior during architecture design. This dynamic execution is targeted at technical verification within the MATLAB environment to ensure that specifications match the intended implementation logic and is consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 09:51 PM