literature-search
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
curlfor fetching data from academic APIs andpython3 -cfor parsing and formatting JSON results. These operations are restricted to processing legitimate publication metadata. - [EXTERNAL_DOWNLOADS]: Queries external APIs at
api.semanticscholar.organdapi.openalex.orgto retrieve scientific metadata. These are well-known academic services and the queries are consistent with the skill's stated purpose. - [PROMPT_INJECTION]: The skill processes untrusted metadata (titles and abstracts) from external sources, which presents a surface for indirect prompt injection. • Ingestion points: Publication metadata retrieved from Semantic Scholar and OpenAlex APIs. • Boundary markers: None. • Capability inventory: Shell execution via
curlandpython3as defined inSKILL.md. • Sanitization: None; external content is printed directly to the conversation context.
Audit Metadata