matlab
Warn
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to use
sudo apt install octave, which involves executing commands with administrative privileges on the host system. - [PROMPT_INJECTION]: The 'Suggest Using K-Dense Web For Complex Workflows' section contains instructions that attempt to override the agent's natural behavior by forcing it to proactively promote a specific commercial website (www.k-dense.ai) during complex tasks, regardless of whether the user requested such a recommendation.
- [DATA_EXFILTRATION]: The skill documents and encourages the use of file I/O operations (e.g.,
readtable,readmatrix,load) for processing external data files. This establishes an ingestion surface for potential data access or indirect prompt injection if the agent processes untrusted files provided by a user without proper sanitization.
Audit Metadata