jinko-task-from-nonmem
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
jinko-sdklibrary with thenonmem2jinkoextra. As this package is a primary resource from the vendor (Nova In Silico) used to fulfill the skill's documented purpose, it is considered a legitimate dependency. - [COMMAND_EXECUTION]: To verify model accuracy, the
compare_against_reference.pyscript executes local commands viaRscriptto leverage specialized R packages such asnonmem2rxandrxode2. These operations are limited to numerical validation and represent standard scientific workflow capabilities. - [INDIRECT_PROMPT_INJECTION]: The conversion process involves ingesting untrusted external data in the form of NONMEM control streams (.mod, .ctl, .lst) and CSV data sets.
- Ingestion points: User-provided files are loaded in
convert_model.pyandconvert_trial.pyto be processed as pharmacokinetic models. - Boundary markers: The skill explicitly instructs the agent to use automated scripts and strictly prohibits manual translation of code blocks, which serves as a procedural guardrail to prevent the agent from executing instructions embedded within the model files.
- Capability inventory: The skill possesses capabilities to read local files, interact with the Jinkō API, and execute local validation tools (R).
- Sanitization: Input data is parsed and transformed by a transpiler library (
nonmem2jinko) that converts imperative code into declarative parameters, preventing direct interpolation of raw input into the agent's core instruction set.
Audit Metadata