conference-paper-writing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary workflow involves reading and processing various files within a user's research repository to understand the project and generate paper drafts. * Ingestion points:
SKILL.mdsuggests using shell commands likefind .,grep, andcatto explore repository structure, results, and documentation. * Boundary markers: The skill does not define specific delimiters or include instructions to disregard potential commands embedded within these untrusted files. * Capability inventory: The skill utilizes shell command execution and network capabilities through Python snippets and external search tools. * Sanitization: There is no documented process for sanitizing or escaping content read from the project files before it is processed by the agent. - [EXTERNAL_DOWNLOADS]: The skill involves fetching configuration and tooling from external locations. * The NeurIPS template's
Makefiledownloads conference style files frommedia.neurips.cc. * The instructions recommend installing an academic search tool frommcp.exa.ai. * Citation retrieval involves network requests todoi.organd Semantic Scholar. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands to explore the research environment and manage LaTeX compilation, including
ls,find,grep,pdflatex, andbibtex.
Audit Metadata