synth-data-generate
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes user-provided inputs (
subject,example_data) to determine the schema and patterns for the generated notebook code. (1) Ingestion points: Data enters the agent context through thesubjectandexample_dataparameters inSKILL.md. (2) Boundary markers: The instructions do not specify explicit delimiters for interpolating user inputs into the code-generation logic. (3) Capability inventory: The skill possesses the ability to create directories, create and edit Jupyter notebooks, and execute Python code cells using specialized tools. (4) Sanitization: The skill implements a mandatory security gate that requires a validated preflight record from a separatedataopsskill before any operations begin. - Dynamic Execution: The skill generates Python code cells in a Jupyter notebook and executes them to perform data generation. This behavior follows established templates and is gated by pre-execution validation steps.
- Environment Verification: The skill performs a version check for the Tesseract OCR engine (
tesseract --version) using terminal tools when image processing is requested. This is a routine check for software availability. - Standard Library Installation: The generated notebook environment installs several well-known and standard Python libraries (
pandas,numpy,matplotlib,seaborn,scipy) to support its core data generation and analysis functions.
Audit Metadata