clinical-decision-support
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local Python scripts located in the scripts/ directory (such as generate_schematic.py and create_waterfall_plot.py) to process data and generate scientific visualizations based on natural language input.
- [PROMPT_INJECTION]: The skill ingests untrusted clinical study data and diagram descriptions through user requests (Ingestion points). There are no defined boundary markers or instructions for the agent to ignore embedded instructions within this processed content (Boundary markers). The skill utilizes the Bash tool for script execution and file modification based on this input (Capability inventory). No sanitization or escaping procedures are specified for user-provided strings before they are passed to local scripts (Sanitization).
Audit Metadata