jinko-task-from-nonmem
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied NONMEM control streams and datasets. This data ingestion surface is protected by a mandatory verification mechanism in
publish_equivalence_report.py, which uses SHA-256 digests to ensure that the content reviewed by a human in a dry-run matches the content eventually published to the platform. \n- [COMMAND_EXECUTION]: The verification logic incompare_against_reference.pyoptionally executes local R scripts to leverage thenonmem2rxandrxode2packages. These calls are limited to model parsing and numerical simulation, using local installations of these pharmacometric libraries. \n- [DATA_EXPOSURE]: The skill manages sensitive model data by uploading it to the Jinkō platform through the officialjinko-sdk. Thepublish_equivalence_report.pyscript includes explicit safeguards against path traversal, rejecting absolute paths, symlinks, or parent directory traversal when handling report images.
Audit Metadata