alpha-research
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: This skill possesses an indirect prompt injection surface as it is designed to ingest and process untrusted external data from research papers and code repositories.
- Ingestion points: The
alpha getcommand (retrieving ArXiv papers) andalpha codecommand (reading GitHub repositories) inSKILL.mdintroduce external content into the agent's context. - Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the retrieved papers or code.
- Capability inventory: The skill uses the bash tool to execute
alphaandfeynmanCLI commands, which can perform network and file operations. - Sanitization: No sanitization or filtering of the external content is described before it is provided to the agent.
- [COMMAND_EXECUTION]: The skill instructs the agent to interact with the environment via the
alphacommand-line interface using bash for paper retrieval, search, and annotation management. - [EXTERNAL_DOWNLOADS]: The skill fetches academic papers and source code from well-known platforms including ArXiv and GitHub. These operations are consistent with the skill's primary research purpose.
Audit Metadata