moos-ivp-docs

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to search for local repositories and process PDF files.
  • Evidence in SKILL.md and references/doc-selection.md includes the use of find, rg (ripgrep), grep, and pdftotext for data extraction.
  • The skill specifies suppressing permission errors using 2>/dev/null during file searches.
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation PDFs from https://oceanai.mit.edu/ivpman/pdfs/.
  • This domain belongs to the Massachusetts Institute of Technology (MIT) and is the official repository for the software being documented.
  • [DATA_EXFILTRATION]: The skill accesses the local environment and file system to locate software checkouts.
  • It checks the MOOS_IVP_ROOT environment variable and performs a bounded search in the user's home directory ($HOME).
  • While this involves reading local file paths, the operations are scoped to finding the moos-ivp directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external MIT PDFs and local source code files to answer user queries.
  • Ingestion points: MIT PDF index (oceanai.mit.edu/ivpman/pdfs/) and local source files (ivp/src/).
  • Boundary markers: The skill lacks explicit instructions to ignore instructions embedded within the documentation it reads.
  • Capability inventory: Uses find, rg, grep, and pdftotext to process files and documents.
  • Sanitization: No evidence of input sanitization or validation for the content extracted from PDFs or source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 11:27 PM