rfd4-proteina-evaluate
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data files to generate scientific metrics, creating an attack surface where malicious instructions could be embedded in data. * Ingestion points: Processes CIF structure files from the
inputsdirectory and metadata from thetask_csvfile, as described inSKILL.mdandreferences/metrics.md. * Boundary markers: There are no specific instructions or delimiters mentioned to prevent the agent from following potential natural language instructions found within the data files. * Capability inventory: The skill possessesBashexecution,Read, andWritecapabilities to run evaluation tools and process results, as defined in the YAML frontmatter ofSKILL.md. * Sanitization: No sanitization or validation logic is specified for the contents of the ingested structure or CSV files. - [DYNAMIC_EXECUTION]: The skill includes a mechanism for extending functionality through custom Python code. As detailed in
SKILL.md(Step 4) andreferences/metrics.md, the tool automatically loads and executes PythonMetricsubclasses placed in thesrc/rfproteina/metrics/custom_metrics/directory. This dynamic loading of local scripts constitutes an execution surface.
Audit Metadata