nvflare-autofl-report
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/generate_report.pydynamically loads and executes Python modules from the local filesystem usingimportlib.utilto maintain parity with core campaign tools. - Modules loaded:
run_job_campaign.py,campaign_guard.py, andplot_progress.py. - Path resolution: Paths are computed relative to the skill's installation directory, targeting the
nvflare-autofl/scripts/neighbor directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted campaign data which could potentially contain malicious instructions intended to influence the agent reading the generated reports.
- Ingestion points: Reads
results.tsv,autofl.yaml, and candidate manifests to synthesize campaign findings. - Boundary markers: The script uses standard markdown table formatting and basic cell escaping, but lacks explicit delimiters to warn the agent about potentially untrusted content in the resulting report.
- Capability inventory: The skill is restricted to file system operations (reading logs and writing reports) and loading local scripts within the campaign workspace.
- Sanitization: Basic escaping is performed for markdown table structure (e.g., escaping pipe characters).
Audit Metadata