review-ml-choices
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local command
python -m skore_skills review choicesto retrieve project status in JSON format. - Evidence: Found in
SKILL.mdunder the 'Sequence' section. - The command belongs to the project's specific tooling and is used for state retrieval.
- [DYNAMIC_EXECUTION]: The skill dynamically identifies and loads other skills based on user input and the current project state.
- Evidence:
SKILL.mdspecifies loading skills such assync-ml-reports,export-ml-project, andframe-ml-problemdepending on which row the user selects to change. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured data (JSON) from an external command and presents it to the user.
- Ingestion points: Output from
python -m skore_skills review choices. - Boundary markers: The skill instructions enforce strict handling of the JSON schema (e.g.,
changeable,framing,read_onlykeys). - Capability inventory: The skill itself cannot modify the environment directly; it only triggers other skills.
- Sanitization: It uses defined schema roles to determine if a value can be changed or if it should be treated as read-only context.
Audit Metadata