alterlab-research-grants
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process, analyze, and revise external grant proposal drafts and funding solicitations (untrusted data) while having access to the Bash tool, which creates a potential attack surface.
- Ingestion points: Proposal drafts, Specific Aims pages, budget justifications, and program solicitations provided by the user for processing or revision in files such as
SKILL.mdandreferences/writing_and_workflow.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded within user-supplied grant content.
- Capability inventory: The skill utilizes
Bash,Write,Edit, andReadtools to assist in proposal drafting and formatting (e.g., LaTeX environment setup as described inreferences/nstc_guidelines.md). - Sanitization: No explicit sanitization or input validation logic is present to filter malicious instructions within processed grant materials before they are handled by the agent.
Audit Metadata