fault-injection-loop
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts and SLURM utilities (
sbatch,squeue) to orchestrate experiments, submit jobs, and poll queue statuses. These operations are the primary function of the tool and are performed using local configurations stored inscripts/user.env. - [REMOTE_CODE_EXECUTION]: The skill implements a feedback loop that involves modifying Python source code (
nvrx_logsage.py) and re-executing it to improve analysis accuracy. This iterative self-modification is an intended design feature for benchmarking log analysis performance. - [PROMPT_INJECTION]: The log analysis process introduces a surface for indirect prompt injection.
- Ingestion points: Training logs generated by workloads are ingested from
${EXPERIMENT_DIR}/logs/slurm/*.main_workload.log. - Boundary markers: The skill does not explicitly define delimiters for separating log content from analysis instructions in its documentation.
- Capability inventory: The skill can execute cluster management commands and modify its own analysis scripts.
- Sanitization: Basic filtering (
exclude_nvrx_logs) is mentioned, though it focuses on noise reduction rather than security sanitization.
Audit Metadata