literature-researcher
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of untrusted external data.
- Ingestion points: Untrusted data enters the agent context via the WebSearch tool during 'Review Discovery' and 'Deep Targeted Research' modes as described in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing the results retrieved from search queries.
- Capability inventory: The skill has capabilities to execute web searches and write synthesized output (Markdown and YAML) to a local output directory (SKILL.md).
- Sanitization: There is no evidence of escaping, validation, or filtering of the external content retrieved from the web before it is interpolated into the final research synthesis.
Audit Metadata