tao-train-optical-inspection
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The unit test script
tests/test_validate_dataset.pyutilizessubprocess.run()to execute thescripts/validate_dataset.pyscript. This execution uses a list-based argument format, avoids shell invocation, and is restricted to the local testing environment with controlled parameters, representing standard and benign development practice. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of dataset CSV files provided by the user.
- Ingestion points: The
scripts/validate_dataset.pyscript accepts a CSV file path via the--csvargument and reads its contents to validate the dataset structure (e.g., intests/test_validate_dataset.py). - Boundary markers: The skill documentation does not define explicit boundary markers or delimiters to isolate user-provided CSV data from agent instructions.
- Capability inventory: The skill has access to
BashandReadtools as declared inSKILL.md, enabling file system interaction and command execution. - Sanitization: The
scripts/validate_dataset.pyscript implements robust sanitization and validation, checking for required columns (input_path,golden_path,label,object_name), verifying the existence of directories, and enforcing specific string formats for labels and object names. This reduces the risk of the agent misinterpreting data as instructions.
Audit Metadata