conference-paper-writing

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and automates downloads from established academic and technical sources.
  • The templates/neurips2025/Makefile uses curl to fetch official style files from media.neurips.cc (the official domain for the NeurIPS conference).
  • The SKILL.md file recommends installing the Exa MCP server from https://mcp.exa.ai/mcp for real-time academic search, which is a recognized service in the AI community.
  • The citation workflow suggests programmatic access to api.semanticscholar.org, api.crossref.org, and doi.org, which are the industry-standard APIs for bibliographic data.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting data from external academic APIs and interpolating that content into paper drafts.
  • Ingestion points: The citation manager in references/citation-workflow.md fetches metadata, abstracts, and BibTeX records from external sources like Semantic Scholar and CrossRef.
  • Boundary markers: The skill explicitly instructs the agent to use placeholders such as [CITATION NEEDED] or \cite{PLACEHOLDER_...} when data cannot be programmatically verified, providing a clear marker for human review.
  • Capability inventory: The skill possesses the capability to perform file system operations (read/write) within the research repository and execute network requests through the agent's tools to manage literature searches.
  • Sanitization: Content fetched from APIs is parsed using regular expressions and formatted according to strict BibTeX/BibLaTeX schema definitions before being added to the project.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 02:36 PM