denario
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of Python code through the
get_results()method, which runs computational experiments, statistical analyses, and visualizations based on generated methodologies. - [EXTERNAL_DOWNLOADS]: The installation documentation references external resources for deployment, including a GitHub repository (AstroPilot-AI/Denario) and a Docker image (pablovd/denario).
- [REMOTE_CODE_EXECUTION]: The skill's primary function involves generating and executing code at runtime to fulfill research objectives, which is an intended capability of the agentic workflow.
- [PROMPT_INJECTION]: The skill ingests untrusted data descriptions and manual research inputs which influence the AI's logic and subsequent code generation.
- Ingestion points: The
set_data_description(),set_idea(), andset_method()functions inresearch_pipeline.mdaccept external text input. - Boundary markers: No specific boundary markers or isolation instructions for user-provided data are mentioned in the documentation.
- Capability inventory: The skill has the ability to execute generated code via the
get_results()function described inresearch_pipeline.md. - Sanitization: No sanitization or validation processes are documented for the external data descriptions prior to their use in the multiagent workflow.
Audit Metadata