grant-thinking-cn-biology
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to use standard command-line tools such as
git,awk,sed,sort, andtailto perform version checks and maintenance tasks. - [EXTERNAL_DOWNLOADS]: The skill is configured to fetch update tags and synchronized content from the author's official GitHub repository (
Agents365-ai/365-skills). This process is transparent and requires human-in-the-loop confirmation. - [DYNAMIC_EXECUTION]: The skill features a self-update capability, allowing it to pull new instructions and configurations from its source repository via
git pullto stay current with funding guidelines. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external content (user grant proposals).
- Ingestion points: User-provided grant ideas, project titles, and draft logic are processed through the instructions in
SKILL.md. - Boundary markers: The instructions use structured sections to separate reasoning layers, though they do not include explicit XML-style delimiters for user input.
- Capability inventory: The agent is permitted to execute
gitfor repository management and shell utilities for version comparison as described in theUpdate checksection ofSKILL.md. - Sanitization: The skill relies on the requirement for explicit user consent before executing commands that modify the local skill directory.
Audit Metadata