matrices
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local utility scripts 'scripts/sympy_compute.py' and 'z3_solve.py' via the 'uv' Python runner. These executions are core to the skill's primary purpose of performing mathematical matrix operations.
- [INDIRECT_PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by interpolating user-provided matrix data into shell commands. 1. Ingestion points: Matrix definitions and vector strings are passed as positional arguments to scripts in SKILL.md tool examples. 2. Boundary markers: Examples utilize double quotes (e.g., '[[1,2],[3,4]]') to delimit matrix data strings passed to the CLI. 3. Capability inventory: The skill utilizes the Bash tool and python execution capabilities to run computation scripts (SKILL.md). 4. Sanitization: Explicit sanitization logic is not defined in the skill text; the implementation relies on standard shell-level quoting and the mathematical parsing logic of the internal utility scripts.
Audit Metadata