flow-nexus-neural
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill setup requires the execution of
npx flow-nexus@latest, which downloads and runs code from the public npm registry to initialize the MCP server and manage user authentication sessions. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection through its data handling processes.
- Ingestion points: Untrusted data enters the agent context through the
configparameter in training functions and theinputarray in prediction functions as defined inSKILL.md. - Boundary markers: There are no delimiters or instructional warnings present to prevent the agent from following malicious instructions potentially embedded in datasets or model configurations.
- Capability inventory: The skill allows for complex operations including distributed code execution in E2B sandboxes, network communication with the Flow Nexus API, and model marketplace interactions.
- Sanitization: No validation, escaping, or schema enforcement mechanisms are documented for the external data processed during model training or inference.
- [DYNAMIC_EXECUTION]: The skill utilizes E2B sandboxes for model training, which involves the dynamic execution of neural network logic. It additionally supports
wasmOptimizationfor performance anddaaEnabledfor autonomous agent coordination, both of which rely on dynamic code execution environments.
Audit Metadata