tao-analyze-changenet-rca
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled data from files such as
inference.csv,experiment.yaml, andstatus.jsonacross all five investigation phases. Maliciously crafted data in these files could attempt to influence the agent's reasoning or report generation. This is an inherent risk for analysis tools ingesting external datasets. - [DYNAMIC_EXECUTION]: The skill generates and executes Python code through the Bash tool (e.g., in
hooks/rca-script-check.shand Phase 2B/3A instructions) to calculate image intensities, perform threshold sweeps, and compute component-level statistics. These scripts are dynamically created to handle the specific structure of the provided experiment results. - [DATA_EXPOSURE]: The
hooks/rca-package.shscript is designed to access platform-specific metadata and configuration files, such as~/.claude/settings.jsonand session transcripts, to bundle them into therca_resultsdirectory. While this facilitates reproducibility, it involves the movement of configuration data within the local workspace.
Audit Metadata