scientific-thinking
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands (
git,awk,sed,sort,tail) in its 'Update check' section to verify the current version against remote tags and to perform updates.\n- [REMOTE_CODE_EXECUTION]: The skill includes logic to update its own source code by executinggit pullfrom the remote repository after obtaining user consent.\n- [EXTERNAL_DOWNLOADS]: The update mechanism fetches information and code from the remote git origin associated with the vendor's repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and interpret external research data and scientific evidence, which serves as an ingestion point for untrusted content.\n - Ingestion points: Research findings, evidence, and user questions processed by the reasoning framework.\n
- Boundary markers: The skill uses a structured 'Core Reasoning Framework' and checklists (in
checks.md) to guide the agent, which helps distinguish between provided data and internal reasoning.\n - Capability inventory: The skill has the ability to execute shell commands for maintenance updates.\n
- Sanitization: No specific input sanitization or escaping of the processed research data is implemented within the provided instructions.
Audit Metadata