dspy
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The documentation includes instructions and examples for using the
ProgramOfThoughtmodule, which is designed to generate and execute Python code dynamically based on natural language inputs. Additionally, the skill provides code examples (e.g., inreferences/examples.md) where tools use theeval()function to process mathematical expressions.- [INDIRECT_PROMPT_INJECTION]: The skill outlines workflows that ingest untrusted external data (such as search results, documents, and user questions) and pass it into modules with execution capabilities. The provided examples do not demonstrate the use of strict boundary markers or sanitization to prevent adversarial instructions from influencing generated code.- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the latest development version of the DSPy library directly from the official GitHub repository of the Stanford NLP group.
Audit Metadata