analyze-experiment-results
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and YAML configuration. It does not include any executable scripts, binary files, or external code dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external data (
experiment_results). This presents a standard vulnerability surface where instructions embedded in the results could theoretically influence the agent, although the skill lacks dangerous capabilities to exploit. - Ingestion points: The
experiment_resultsobject defined in the input contract ofSKILL.md. - Boundary markers: No explicit delimiters or safety instructions are defined for the input data.
- Capability inventory: The skill performs logical analysis and references internal skills (
statistical-testing,verify-reproducibility) but does not execute shell commands, perform network requests, or modify the file system. - Sanitization: No sanitization or validation logic for the input data is present in the skill definition.
Audit Metadata