tao-analyze-changenet-rca
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXPOSURE]: The
hooks/rca-package.shscript captures the execution environment for reproducibility by copying configuration files from the.claude/directory, includingsettings.jsonandsettings.local.json, into the timestamped output folder. This ensures that the exact state of the analysis environment is preserved alongside the results. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources including
inference.csv,train.csv,val.csv,experiment.yaml, andstatus.jsonto drive its investigation phases. - Ingestion points: Data is read from experiment result files such as
inference/inference.csvand training configuration files likeexperiment.yaml. - Boundary markers: The workflow does not explicitly define delimiters when passing data extracted from these files to parallel subagents.
- Capability inventory: The skill leverages the
Bashtool for script execution, theReadtool for visual inspection, and theAgenttool for distributed analysis. - Sanitization: Standard parsing libraries (JSON, CSV) are used for data ingestion, though no specialized filtering is applied to the content used for downstream reasoning.
- [DYNAMIC_EXECUTION]: The skill workflow extensively uses dynamically generated Python scripts to perform data analysis tasks. This includes calculating pixel intensity for golden image audits, performing component-type clustering, and mining metadata for correlations between scores and hardware positions.
Audit Metadata