AI Data Remediation Engineer
Warn
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
eval()to execute Python lambda functions generated by an AI model (Ollama/Phi-3). Although it includes a safety gate to check for forbidden keywords (import,exec,eval,os,subprocess), relying on string-based blacklisting to sanitize code before execution is a known security risk. An attacker or a hallucinating model could potentially bypass these filters to execute arbitrary code within the host environment. - [EXTERNAL_DOWNLOADS]: The skill downloads the
all-MiniLM-L6-v2embedding model from thesentence-transformerslibrary. While this is a standard library, the download occurs at runtime from external repositories.
Audit Metadata