alterlab-peer-review
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external scientific manuscripts and grant proposals, which could contain malicious instructions designed to influence the agent's behavior during the review process.
- Ingestion points: Processes academic research papers and grant applications provided by the user as input.
- Boundary markers: The workflow lacks specific boundary markers or 'ignore embedded instructions' warnings for the processing of external document text.
- Capability inventory: The agent has access to
Bash(used for file conversion) andWrite/Edittools for creating reviewer reports. - Sanitization: There is no evidence of input validation or content sanitization performed on the analyzed manuscripts.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a specific Python script using the Bash tool to convert presentation PDFs into images for inspection.
- Evidence: The command
python skills/writing-tools/alterlab-scientific-slides/scripts/pdf_to_images.py presentation.pdf review/slide --dpi 150is specified inSKILL.mdandreferences/presentation_review.mdas a mandatory step for reviewing slide decks.
Audit Metadata