minimal-run-and-audit

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/run_command.py script executes shell commands, including git operations and user-defined research commands, to facilitate reproduction auditing. This is the primary functionality of the skill.
  • [DYNAMIC_EXECUTION]: The scripts/run_command.py and scripts/write_outputs.py files dynamically resolve paths to a local shared/scripts directory to load required utility modules. This is an architectural choice for sharing code within the associated skill ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses regular expressions to extract scientific metrics from the command execution logs. While this allows content from the process logs to be reflected in the final JSON output, it is a standard data collection pattern for this domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:24 PM
Security Audit — agent-trust-hub — minimal-run-and-audit