dspy-reasoning-modules
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
dspyPython library and official documentation located atdspy.ai, which are established resources for language model programming. - [COMMAND_EXECUTION]: Instructions describe how to use DSPy modules like
ProgramOfThoughtandRLMwhich generate and run Python code. The skill mitigates risks by recommending the use of the sandboxeddspy.PythonInterpreterbased on Deno and Pyodide to isolate code execution from the host system. - [PROMPT_INJECTION]: The skill provides patterns for processing large external documents which creates an attack surface for indirect prompt injection.
- Ingestion points: Data is ingested into the agent context via the
documentparameter inRLMcalls. - Boundary markers: The provided examples do not use explicit delimiters, relying on the underlying library's prompting logic.
- Capability inventory: The agent is given instructions to execute code using the
dspy.PythonInterpretertool. - Sanitization: Security is addressed by explicitly recommending restricted sandboxes that deny filesystem and network access by default.
Audit Metadata