alterlab-tr-academic-style
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user manuscripts, which creates a potential attack surface for indirect prompt injection. \n
- Ingestion points: The skill is designed to read and edit manuscript files (e.g., .md, .txt, .tex) provided by the user via agent tools. \n
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined in the instructions for the agent to apply when processing manuscript content. \n
- Capability inventory: The agent has access to Read, Write, Edit, and Bash tools to manipulate files and execute local scripts. \n
- Sanitization: While the linter script identifies formatting errors, the skill does not explicitly sanitize the document content to prevent the agent from following instructions embedded within the text. \n- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python linter script (
scripts/tr_apa_lint.py). \n - The script is provided within the skill package and relies only on the Python standard library. \n
- No external packages are installed, and no remote code is downloaded or executed. \n
- The usage of Bash is restricted to running this local diagnostic script.
Audit Metadata