agent-matrix-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes potentially untrusted external matrix data (e.g.,
matrixData,sparseValues,rhsVector) through tools likemcp__sublinear-time-solver__analyzeMatrix. While no explicit malicious instructions are present, the ingestion of large-scale data structures creates a surface for indirect prompt injection if those structures contain embedded natural language instructions meant to influence the agent's output or recommendations. - Ingestion points:
matrixDatainanalyzeMatrix,sparseValuesinsolve, andrhsVectorinestimateEntry. - Boundary markers: None identified in the provided skill definition.
- Capability inventory: Includes file/sandbox execution via
mcp__flow-nexus__sandbox_executeand network-like coordination via Swarm/Flow Nexus. - Sanitization: No explicit sanitization or validation logic is shown for the incoming data arrays or objects.
- [COMMAND_EXECUTION]: The skill facilitates the execution of dynamic Python code within a sandbox environment via
mcp__flow-nexus__sandbox_execute. While this is an intended feature for matrix optimization, it allows the agent to run arbitrary logic based on its analysis of potentially untrusted data.
Audit Metadata