first-order-odes
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'Bash' tool to execute Python code and internal scripts (e.g., 'scripts/sympy_compute.py') using the 'uv' package runner.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to the interpolation of untrusted user input into shell command templates.
- Ingestion points: User-provided mathematical equations and initial conditions are intended to be processed by the 'dsolve' and 'solve' commands in SKILL.md.
- Boundary markers: No delimiters or instructions are provided to the agent to treat interpolated math strings as non-executable data.
- Capability inventory: Access to the 'Bash' tool for command execution and the 'Read' tool for file system access.
- Sanitization: The skill does not implement or describe any validation or escaping of special characters within the user-controlled strings before they are passed to the shell.
Audit Metadata