paper-plot-stub
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/plot.py) using thepythonorpython3binary to process data and generate visualizations. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external data from a CSV file, which serves as a potential ingestion point for untrusted content.
- Ingestion points: The
scripts/plot.pyscript reads the file specified by thecsvargument usingcsv.DictReader. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present.
- Capability inventory: The skill is capable of reading local files and writing output files to the filesystem.
- Sanitization: The script enforces strict type safety by casting all input data to float values (
float(row["x"])), which effectively sanitizes the input against non-numeric malicious payloads.
Audit Metadata