denario

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of Python code through the get_results() method, which runs computational experiments, statistical analyses, and visualizations based on generated methodologies.
  • [EXTERNAL_DOWNLOADS]: The installation documentation references external resources for deployment, including a GitHub repository (AstroPilot-AI/Denario) and a Docker image (pablovd/denario).
  • [REMOTE_CODE_EXECUTION]: The skill's primary function involves generating and executing code at runtime to fulfill research objectives, which is an intended capability of the agentic workflow.
  • [PROMPT_INJECTION]: The skill ingests untrusted data descriptions and manual research inputs which influence the AI's logic and subsequent code generation.
  • Ingestion points: The set_data_description(), set_idea(), and set_method() functions in research_pipeline.md accept external text input.
  • Boundary markers: No specific boundary markers or isolation instructions for user-provided data are mentioned in the documentation.
  • Capability inventory: The skill has the ability to execute generated code via the get_results() function described in research_pipeline.md.
  • Sanitization: No sanitization or validation processes are documented for the external data descriptions prior to their use in the multiagent workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 11:42 AM
Security Audit — agent-trust-hub — denario