matlab
No security findings. Scanned 1 time, most recently 2026-10-21.
Second scanner: NVIDIA SkillSpector
SkillSpector found no issues but could not fully inspect the package, usually because SKILL.md refers to a file that is not present, so it fails closed to CAUTION instead of SAFE. Read it as "not fully checked", not as a finding. How the two scanners compare across the whole corpus: Two scanners, one corpus.
What this skill does
Builds, reviews, migrates, and plans MATLAB or GNU Octave numerical workflows. Use for arrays, tabular/time data, tests, projects, graphics, MAT files, and explicit Python interoperability.
- Package
- 20 files, 167 KB
- SKILL.md
- 1932 words, 12+ sections
- Code
- Python (8)
- Allowed tools
ReadWriteBashGlobPython- License
- MIT
- Compatibility
- Documentation is pinned where noted to proprietary MATLAB R2026a and free GNU Octave 11.3.0. Bundled Python CLIs require Python 3.11+ and run locally without MATLAB or Octave; optional MAT inventory uses scipy and/or h5py.
SKILL.md covers: MATLAB and GNU Octave · Review scope · Product and license gate · Nonnegotiable safety boundary · Default workflow · Language and data checklist · Scripts, functions, and live scripts · Arrays, indexing, and numerics · Tables, timetables, and missing values · Graphics and export · MAT files and exchange · Projects, analysis, and tests
Findings
No findings. SAFE
What is in the package
| File | Kind | Size |
|---|---|---|
SKILL.md | doc | 16 KB |
assets/project_manifest_template.json | config | 723 B |
assets/python_compatibility_r2026a.json | config | 786 B |
assets/reproducibility_manifest_template.json | config | 787 B |
references/data-import-export.md | doc | 9.5 KB |
references/executing-scripts.md | doc | 10 KB |
references/graphics-visualization.md | doc | 7.3 KB |
references/mathematics.md | doc | 8.4 KB |
references/matrices-arrays.md | doc | 8.3 KB |
references/octave-compatibility.md | doc | 8.3 KB |
references/programming.md | doc | 11 KB |
references/python-integration.md | doc | 11 KB |
scripts/_common.py | script | 8.6 KB |
scripts/generate_function_scaffold.py | script | 4.8 KB |
scripts/inventory_mat_file.py | script | 12 KB |
scripts/plan_batch_command.py | script | 9.6 KB |
scripts/plan_python_compatibility.py | script | 6.4 KB |
scripts/reproducibility_report.py | script | 7.8 KB |
scripts/scan_m_code.py | script | 14 KB |
scripts/validate_project_manifest.py | script | 12 KB |
External hosts referenced
www.mathworks.com docs.octave.org octave.org arxiv.org pypi.org docs.h5py.org docs.scipy.org doi.org export.arxiv.org
Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.
Package contents recorded 2026-10-22 at commit 593377bb0487. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.
What we checked
- Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
- Bytecode analyzer.
- Pipeline analyzer.
- Correlation analyzer.
- Behavioral analyzer. Checks what the skill asks the agent to do against what its description claims it does.
- Trigger analyzer. Looks for instructions that fire on conditions the user did not ask for.
What we did not check
- Runtime behaviour. The skill was not executed; findings come from reading its files.
- Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
- Content the analyzers cannot read: images, binaries, and some non-English text.
- Known scanner bypass classes. See the methodology and limitations page.
Sources
- Repository: https://github.com/K-Dense-AI/scientific-agent-skills
- Raw scan result: skills-matlab-scan.json
- Badge for your README:
- Request a re-scan