alterlab-rma-citation-manager
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted external sources, including web search results and user-provided project files, creating a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed to 'search the web' for style updates and 'read existing project files' such as drafts and reference lists (SKILL.md).
- Boundary markers: There are no explicit instructions for using delimiters or boundary markers to isolate external data from the agent's instructions.
- Capability inventory: The agent has permissions to perform web searches, read local files, and write markdown files to the project directory.
- Sanitization: No explicit sanitization or validation protocols are mentioned for the ingested content.
- [NO_CODE]: The skill is composed entirely of markdown instructions and YAML metadata without any accompanying executable scripts, binaries, or package dependencies.
Audit Metadata