dblp-search
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches bibliographic metadata from DBLP's public API (dblp.org). DBLP is a well-known and established computer science bibliography service.
- [COMMAND_EXECUTION]: Uses
curlto query search endpoints andpython3 -cto format the resulting JSON output. The python code is a static script included in the skill body for data parsing purposes and does not execute the remote API response as code. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data (publication titles, author names, venues) from the DBLP API into the agent's context.
- Ingestion points: API responses from
dblp.orginSKILL.md. - Boundary markers: Not present; however, the data is bibliographic metadata from a reputable source.
- Capability inventory: Data is printed to the console using a python formatting script.
- Sanitization: The skill uses
json.load()to safely parse the input as structured data.
Audit Metadata