skills/udnisap/skills/maths/Gen Agent Trust Hub

maths

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute Python code via the command line (python -c) and run standalone scripts for mathematical tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided mathematical expressions through scripts. 1. Ingestion points: User expressions passed as command-line arguments to scripts/sympy_solve.py and scripts/sympy_integrate.py. 2. Boundary markers: None identified. 3. Capability inventory: Shell execution of Python scripts and symbolic parsing via SymPy. 4. Sanitization: scripts/sympy_integrate.py uses a locals_map to restrict the namespace during parsing, while scripts/sympy_solve.py does not provide explicit namespace restriction.
  • [DYNAMIC_EXECUTION]: The SymPy library's sympify function is used to parse and evaluate mathematical expressions at runtime.
  • [PRIVILEGE_ESCALATION]: The installation instructions for Linux systems include commands requiring sudo to install system-level Python packages and development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 07:02 PM
Security Audit — agent-trust-hub — maths