bib-search-citation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied .bib files, which are untrusted external data. The SKILL.md file contains explicit safety boundaries directing the agent to ignore any instructions embedded in bibliographic fields (e.g., abstracts, titles). The underlying scripts perform string normalization and tokenization for search purposes and do not interpret or execute the data.
- [COMMAND_EXECUTION]: The skill invokes local Python scripts using the uv run tool. Technical analysis of the scripts shows they only utilize standard libraries for text processing and JSON formatting. There is no evidence of arbitrary command execution or shell injection vulnerabilities.
- [DATA_EXFILTRATION]: The skill scripts do not contain network-enabled libraries or operations. They read from local files and output search results to standard output, following the principle of least privilege regarding data access.
Audit Metadata