nooa-codeact-advanced
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill describes an execution environment where the agent generates and runs Python code cells (
execute_python). It details the use ofRestrictionsConfigto block hazardous modules (e.g.,subprocess,socket) and functions (e.g.,exec,eval,os.system). These are intended architectural features with documented security mitigations. - [INDIRECT_PROMPT_INJECTION]: The skill details how the agent ingests parameters and external context which are then used within the code execution loop. It documents boundary markers and sanitization strategies, such as
spec()parameter constraints andTruncationConfiglimits. * Ingestion points: Agent method parameters and data processed withinexecute_pythoncells. * Boundary markers:spec()annotations andTruncationConfigcharacter caps. * Capability inventory: Python REPL execution (execute_python), media viewing (show), and result validation (return_result). * Sanitization:RestrictionsConfigdenylist and AST-based validation.
Audit Metadata