sd-journal-browse
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web pages, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill scrapes text and HTML content from ScienceDirect journal pages using the
evaluate_scripttool as described inSKILL.md. - Boundary markers: Extracted data is structured into a JavaScript object (
result) and subsequently rendered via markdown templates, providing a clear separation between data and instructions. - Capability inventory: The skill has access to
navigate_pageandevaluate_scriptfor browser interaction and data processing. - Sanitization: Basic string manipulation like
.trim()and.substring()are used for formatting, though no robust sanitization of external text content is implemented. - [DYNAMIC_EXECUTION]: The skill utilizes dynamic JavaScript execution to extract journal metadata and interact with the page.
- An
evaluate_scriptblock inSKILL.mdperforms DOM traversal and data extraction at runtime. - The skill uses an
initScriptto redefine thenavigator.webdriverproperty to evade bot detection during thenavigate_pagecall. - Instructions include logic to detect and automate interactions with Cloudflare Turnstile if present, involving locating and clicking elements within an iframe context.
Audit Metadata