agent-analytics-autoresearch
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it is designed to ingest and process external analytics reports and user briefs to influence its output.
- Ingestion points: The agent reads data from
brief.mdand various text snapshots in thedata/directory. - Boundary markers: The instructions rely on standard Markdown formatting but do not include specific delimiters or instructions to ignore potential commands embedded within the external data snapshots.
- Capability inventory: The skill possesses file-writing capabilities (
results.tsv,final_variants.md) and shell execution capabilities (npx,bashscripts). - Sanitization: The skill processes external data content directly into the variant generation loop without explicit sanitization or validation steps.
- [EXTERNAL_DOWNLOADS]: The skill fetches a versioned CLI tool from the vendor's official package namespace.
- Evidence:
SKILL.mdandreferences/brief-template.mdusenpx --yes @agent-analytics/cli@0.5.31to perform analytics operations. This is a vendor-owned resource pinned to a specific version. - [COMMAND_EXECUTION]: The skill executes local bash scripts and system binaries to initialize the environment and process data.
- Evidence: The skill invokes scripts like
scripts/init_autoresearch_run.shandscripts/collect_agent_analytics_snapshot.shto manage workspace setup and data collection. It also usesperlfor basic text processing on command output.
Audit Metadata