alterlab-market-research
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and processes it using shell capabilities, creating a potential injection surface.\n
- Ingestion points: External research data gathered via the research-lookup tool during Phase 1.\n
- Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish untrusted data from internal instructions.\n
- Capability inventory: The skill uses the Bash tool to run the LaTeX toolchain and the Write/Edit tools for file management.\n
- Sanitization: No sanitization or validation of the retrieved external content is specified before interpolation into the report.\n- [DYNAMIC_EXECUTION]: The skill generates LaTeX source code at runtime and compiles it into a final document.\n
- Evidence: Phase 5, Step 9 in SKILL.md executes xelatex and bibtex via the Bash tool.\n- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local commands required for the report build process.\n
- Evidence: Commands such as xelatex and bibtex are called to compile the generated drafts.
Audit Metadata