bears-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popenwithin its threading modules (thread.py) to invoke a local utility namedpuda. This command is used to monitor real-time telemetry from a mass balance during experiments. The execution uses list-based arguments and is a core functional component for laboratory data collection. - [INDIRECT_PROMPT_INJECTION]: The workflows for colour and viscosity optimization ingest data from external sources (camera images and balance readings) and incorporate an LLM optimization layer. The skill implements strong mitigations against injection risks, including mandatory JSON schema validation, physical constraint checks (e.g., volume sum validation), and requiring explicit user approval before executing any suggestions provided by the optimizer.
- [DYNAMIC_EXECUTION]: The skill generates Python-based protocol files for Opentrons robots. These are produced using structured template builders (
build_colour_mixing_protocol.py) based on validated numeric inputs. The generation logic is transparent and does not involve executing arbitrary code from untrusted remote sources.
Audit Metadata