sympy

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill describes the use of sympy.lambdify and codegen for converting symbolic expressions into executable Python, C, or Fortran functions. The documentation correctly includes a warning that these capabilities involve runtime code execution and should only be used with trusted inputs.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for ingesting mathematical expressions which may originate from external sources. The documentation provides remediation guidance by advising that lambdify and string parsing should not be performed on unsanitized untrusted data.
  • [EXTERNAL_DOWNLOADS]: The skill includes references to the official SymPy project repository and its public documentation site. These links point to well-known resources for the library's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 08:14 PM