paper-figure
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates Python scripts locally and executes them using a bash loop (
python "$script") to create figures. This is the primary intended function of the skill and is performed on the local filesystem using standard plotting libraries. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads from local data files (JSON, CSV) and writes to a specific directory (
figures/). It sends figure descriptions and captions to an external model (gpt-5.4viamcp__codex__codex) for quality review, which is a documented and standard part of the research workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources like
PAPER_PLAN.mdand experiment logs to generate content. While this creates a surface for indirect injection where data content could influence generated scripts, the provided templates focus on standard data loading (e.g.,json.load), and the execution is restricted to the local environment for plot generation.
Audit Metadata