day0-release
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data from files in the workspace to make automated gating decisions, creating an attack surface for indirect instruction injection.
- Ingestion points: JSON summary files are read by
gate_ptq.py,gate_run.py,gate_compare.py, andgate_verbosity.pyto determine workflow progress. - Boundary markers: The skill uses structured JSON parsing but does not implement explicit delimiters or instruction-bypass warnings for the content processed from these files.
- Capability inventory: The skill executes shell commands to run gating scripts and coordinates multiple other domain skills including quantization and deployment.
- Sanitization: Scripts include basic validation for data types (numeric scores) and terminal statuses (e.g., SUCCESS), but do not filter for natural language instructions embedded within metadata or error fields.
- [DYNAMIC_EXECUTION]: The skill's testing infrastructure employs dynamic module loading to initiate its test framework.
- Evidence: The
tests/test_gates.pyscript uses the__import__function to dynamically load and execute thepytestrunner at runtime.
Audit Metadata