backing-claims
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several shell commands to facilitate literature search and metadata validation. This includes the
scholarCLI tool for querying databases and thescripts/check_provenance.pyscript for linting BibTeX files. These commands are integral to the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of academic metadata and full-text PDFs from well-known scholarly services such as Semantic Scholar, OpenAlex, DBLP, arXiv, and Crossref. It also uses
WebFetchto read content from arbitrary publisher domains for verification purposes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external academic search results, abstracts, and PDF files. While a malicious document could theoretically contain instructions to influence the agent, the skill implements a rigorous verification protocol to mitigate this risk.
- Ingestion points: Data is ingested via
scholar search,scholar rq,scholar pdf open, andWebFetchoperations. - Boundary markers: The skill uses structured provenance comment blocks and BibTeX entry formats to separate citation metadata from other content.
- Capability inventory: The agent has the ability to execute shell commands (
scholar,scripts/check_provenance.py), perform file I/O on.biband.mdfiles, and conduct network operations via the search tools. - Sanitization: The skill requires a manual verification step where the agent must confirm that a verbatim quote from the source entails the claim, guided by the
references/verification-checklist.md.
Audit Metadata