manage-refs
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates manuscript builds using bash scripts and Python's
subprocessmodule to invoke thepandocbinary and chain validation steps. - [EXTERNAL_DOWNLOADS]: The
fill_journal_abbrev.pyscript queries the National Institutes of Health (NIH) PubMed API ateutils.ncbi.nlm.nih.govfor authoritative journal abbreviations. Additionally,check_csl_render.pymay fetch style files fromzotero.org, which are well-known services. - [DYNAMIC_EXECUTION]: The
inject_zotero_cwyw.pyscript performs runtime monkey-patching of the vendoredzotero_to_csl_jsonfunction to redirect metadata requests to Zotero's local API. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided markdown and BibTeX files to extract citation keys and captions, creating a theoretical surface for injection.
- Ingestion points: Reads
manuscript.mdandrefs.bibacross multiple scripts includingcheck_citation_keys.pyandcheck_xref.py. - Boundary markers: Uses specific regex patterns for citekeys like
[@key]as delimiters. - Capability inventory: Subprocess calls to
pandoc, Word document creation viapython-docx, and network access to PubMed. - Sanitization: Processes data using deterministic regex and standard Pandoc parsing; no specific security-focused sanitization is performed on user text.
Audit Metadata