sympy
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the autowrap and ufuncify utilities which generate and compile C or Fortran code at runtime using system compilers to create high-performance binary extensions for mathematical functions.
- [PROMPT_INJECTION]: The skill describes the parse_expr and parse_latex functions for converting string inputs into symbolic expressions. The documentation explicitly warns developers to sanitize user input to prevent code injection vulnerabilities. 1. Ingestion points: parse_expr in references/code-generation-printing.md. 2. Boundary markers: Absent in examples. 3. Capability inventory: lambdify, autowrap, and eval. 4. Sanitization: Security warning provided in documentation.
- [SAFE]: All external references and downloads target the official SymPy GitHub repository and documentation, which are well-known and trusted sources for the scientific Python community.
Audit Metadata