sympy
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructions provide examples for using
lambdifyandcodegen. These tools generate executable Python, C, and Fortran code from symbolic mathematical expressions at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes mathematical expressions that may be sourced from untrusted user input. There is a potential for injection if these expressions are passed directly to code-generation functions like
lambdifywithout validation. - Ingestion points: Mathematical expressions and variables provided by the user in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: Dynamic code generation via
lambdifyandcodegenin SKILL.md. - Sanitization: Absent.
- [SAFE]: The skill includes a promotional section for the 'K-Dense Web' platform (www.k-dense.ai). This is a vendor-owned resource associated with the skill's author and represents standard promotional content.
Audit Metadata