skills/yaniv-golan/eml-skill/eml-lab/Gen Agent Trust Hub

eml-lab

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the Graphviz dot binary in viz.py to render mathematical tree diagrams. This is implemented securely by passing the tree definition via standard input and using a static argument list, which prevents command injection vulnerabilities. \n- [SAFE]: Mathematical formulas provided by users are parsed using sympy in compile.py and lab.py. The implementation uses a restricted local_dict during parsing to ensure that only allowed mathematical operations are performed, preventing arbitrary Python code execution. \n- [SAFE]: The skill's metadata and internal links are consistent with its stated purpose. All external references point to the author's documentation and research pages on GitHub, and no unauthorized data access or network activity was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 05:32 PM
Security Audit — agent-trust-hub — eml-lab