conference-paper-writing
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and automates downloads from established academic and technical sources.
- The
templates/neurips2025/Makefileusescurlto fetch official style files frommedia.neurips.cc(the official domain for the NeurIPS conference). - The
SKILL.mdfile recommends installing the Exa MCP server fromhttps://mcp.exa.ai/mcpfor real-time academic search, which is a recognized service in the AI community. - The citation workflow suggests programmatic access to
api.semanticscholar.org,api.crossref.org, anddoi.org, which are the industry-standard APIs for bibliographic data. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting data from external academic APIs and interpolating that content into paper drafts.
- Ingestion points: The citation manager in
references/citation-workflow.mdfetches metadata, abstracts, and BibTeX records from external sources like Semantic Scholar and CrossRef. - Boundary markers: The skill explicitly instructs the agent to use placeholders such as
[CITATION NEEDED]or\cite{PLACEHOLDER_...}when data cannot be programmatically verified, providing a clear marker for human review. - Capability inventory: The skill possesses the capability to perform file system operations (read/write) within the research repository and execute network requests through the agent's tools to manage literature searches.
- Sanitization: Content fetched from APIs is parsed using regular expressions and formatted according to strict BibTeX/BibLaTeX schema definitions before being added to the project.
Audit Metadata