scientific-writing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which introduces a surface for indirect instructions.\n
- Ingestion points:
SKILL.mdoutlines procedures for reading reviewer annotations from reMarkable and student survey answers for qualitative analysis.\n - Boundary markers: There are no explicit markers or instructions provided to delimit these external inputs from the agent's primary instructions.\n
- Capability inventory: The skill has access to
git,ghCLI,canvaslmsCLI, and thellmpackage to manage repository state and external platform data.\n - Sanitization: The skill lacks explicit sanitization or escaping instructions for the external content it processes.\n- [DYNAMIC_EXECUTION]: The skill generates and executes code as part of a literate programming workflow.\n
- Evidence:
SKILL.mddescribes the "tangling" of noweb source files into runnable artifacts like Python scripts and platform-specific JSON files, which are then used to create instruments and analyze data.\n- [COMMAND_EXECUTION]: The skill uses various command-line utilities to perform workflow tasks.\n - Evidence: The instructions include the use of
git pushfor repository updates,gh pr createandgh issue createfor task management, andcanvaslmsCLI for platform interaction.
Audit Metadata