sympy
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill describes the use of
sympy.lambdifyandcodegenfor converting symbolic expressions into executable Python, C, or Fortran functions. The documentation correctly includes a warning that these capabilities involve runtime code execution and should only be used with trusted inputs. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for ingesting mathematical expressions which may originate from external sources. The documentation provides remediation guidance by advising that
lambdifyand string parsing should not be performed on unsanitized untrusted data. - [EXTERNAL_DOWNLOADS]: The skill includes references to the official SymPy project repository and its public documentation site. These links point to well-known resources for the library's ecosystem.
Audit Metadata