tao-prepare-anomalygennext-inputs
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/run_anomalygennext_amp.pyutilizessubprocess.runto execute a hardcoded Python bootstrap string. This string imports and configures theanomalygenmodule before running a specific entry point (roi_place). This is a controlled mechanism used to launch container-native logic with specific environment initializations.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing external data files that contain text-based placement prompts.\n - Ingestion points:
scripts/prepare_anomalygennext_inputs.pyandscripts/run_anomalygennext_amp.pyingest configuration from YAML, Parquet files, and JSONL defect specifications containingroi_prompt_defect_locationstrings.\n - Boundary markers: No explicit delimiters or 'ignore' instructions are applied to the textual prompts extracted from the input data.\n
- Capability inventory: The skill performs file system writes (
shutil.copy2,pandas.to_parquet) and executes subprocesses (subprocess.runinscripts/run_anomalygennext_amp.py).\n - Sanitization: Input data is validated for schema and file existence, but the textual content of prompts is passed through to the generation tool without specific sanitization against instruction injection.
Audit Metadata