scientific-db-uspto-database
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external USPTO APIs, which constitutes an attack surface for indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: Data is retrieved from the USPTO Open Data Portal (ODP), PatentSearch, and TSDR APIs as described in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters to isolate external data from the agent's internal instructions.
- Capability inventory: The skill uses the Python
requestslibrary to perform network operations (HTTP POST) to external endpoints. - Sanitization: The provided Python request skeleton fetches and prints the raw JSON response without validation or sanitization.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch patent and trademark records from official and well-known domains.
- Fetches data from official USPTO developer and data portals (
uspto.gov). - Accesses the USPTO-supported PatentsView search API (
search.patentsview.org).
Audit Metadata