residual-edge-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided CSV return series and JSON configuration files, presenting a potential surface for indirect prompt injection.\n
- Ingestion points:
scripts/analyze_residual_edge.pyreads data from paths specified in the--inputand--configarguments.\n - Boundary markers: The script implements strict deterministic validation, rejecting malformed dates or non-finite numbers. Instructions mandate manual interpretation of results.\n
- Capability inventory: The skill performs file reads, mathematical modeling, and file writes. It does not possess network access or arbitrary command execution capabilities.\n
- Sanitization: Input is parsed through
json.loadsandcsv.DictReaderwith explicit type checks and schema version enforcement.\n- [COMMAND_EXECUTION]: The testing suite utilizes shell command execution to perform integration tests on the CLI.\n - Evidence:
scripts/tests/test_analyze_residual_edge.pycallssubprocess.run()to execute the analysis script usingsys.executable. This is a routine and safe testing practice for verifying command-line tools.\n- [DYNAMIC_EXECUTION]: The skill uses dynamic loading within its test configuration.\n - Evidence:
scripts/tests/conftest.pyemploysimportlib.utilto load the local analysis script as a module for testing. This is a standard testing pattern that does not involve untrusted remote code.
Audit Metadata