maths
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute Python code via the command line (
python -c) and run standalone scripts for mathematical tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided mathematical expressions through scripts. 1. Ingestion points: User expressions passed as command-line arguments to
scripts/sympy_solve.pyandscripts/sympy_integrate.py. 2. Boundary markers: None identified. 3. Capability inventory: Shell execution of Python scripts and symbolic parsing via SymPy. 4. Sanitization:scripts/sympy_integrate.pyuses alocals_mapto restrict the namespace during parsing, whilescripts/sympy_solve.pydoes not provide explicit namespace restriction. - [DYNAMIC_EXECUTION]: The SymPy library's
sympifyfunction is used to parse and evaluate mathematical expressions at runtime. - [PRIVILEGE_ESCALATION]: The installation instructions for Linux systems include commands requiring
sudoto install system-level Python packages and development tools.
Audit Metadata