find-paper-references
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/convert_to_docx.pyusessubprocess.runto interact with the system'swingetpackage manager and thepandocdocument converter. - Evidence:
subprocess.run(["winget", "install", "--id", "JohnMacFarlane.Pandoc", ...])inscripts/convert_to_docx.pyis used to automate the installation of a legitimate document utility. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to fetch research data from PubMed and LitSense.
- Evidence: Queries are sent to
eutils.ncbi.nlm.nih.govandwww.ncbi.nlm.nih.govinscripts/batch_search.pyandscripts/remap_refs.py. These are well-known official services for medical research. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Markdown files (academic papers) to extract knowledge points for search queries.
- Ingestion points: The skill reads full paper text to identify sentences requiring citations, as described in
SKILL.mdStep 2. - Boundary markers: The workflow defines strict 'Citation zones' (e.g., Introduction and Discussion only for Research Articles) to limit the scope of processed text.
- Capability inventory: The skill has file read/write access and network access to PubMed API endpoints.
- Sanitization: The skill extracts core concepts and MeSH terms to build structured JSON queries, providing a layer of validation between user input and external searches.
Audit Metadata