alterlab-scholar-eval
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill files do not contain any malicious code, prompt injections, or unauthorized data access patterns. The functionality is consistent with its stated purpose of academic evaluation.
- [COMMAND_EXECUTION]: The SKILL.md file provides instructions for executing a schematic generation script (scripts/generate_schematic.py) which is not included in the provided file set. While this may cause operational failures, it does not represent a direct security threat.
- [SAFE]: The skill processes untrusted scholarly work which represents a potential surface for indirect prompt injection. Ingestion points: Research papers and proposals processed in the evaluation workflow (SKILL.md). Boundary markers: The framework lacks explicit delimiters or instructions to ignore embedded commands in the source material. Capability inventory: The skill utilizes script execution (calculate_scores.py) and references external diagram generation. Sanitization: No explicit input validation or sanitization of scholarly content is documented before it is passed to evaluation dimensions or diagram descriptions.
Audit Metadata