dblp-search

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches bibliographic metadata from DBLP's public API (dblp.org). DBLP is a well-known and established computer science bibliography service.
  • [COMMAND_EXECUTION]: Uses curl to query search endpoints and python3 -c to format the resulting JSON output. The python code is a static script included in the skill body for data parsing purposes and does not execute the remote API response as code.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data (publication titles, author names, venues) from the DBLP API into the agent's context.
  • Ingestion points: API responses from dblp.org in SKILL.md.
  • Boundary markers: Not present; however, the data is bibliographic metadata from a reputable source.
  • Capability inventory: Data is printed to the console using a python formatting script.
  • Sanitization: The skill uses json.load() to safely parse the input as structured data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 02:55 PM