paperclip-pipeline
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from academic sources and web links, creating a surface for indirect prompt injection where malicious instructions could be hidden in research papers.
- Ingestion points: External research goals, source material locations, and public links are ingested via
SKILL.mdandreferences/workflow.md. - Boundary markers: The workflow enforces a structured YAML handoff schema (
references/handoff-contract.md) and a 'Security Boundary' protocol (references/security-boundary.md) to isolate external data from agent logic. - Capability inventory: Agents are permitted to read/modify files and execute shell commands to verify research artifacts (
references/handoff-contract.md). - Sanitization: The
references/security-boundary.mdfile defines a comprehensive sanitization process using specific placeholders (e.g.,<PAPERCLIP_API_URL>,<PROJECT_PATH>) to replace sensitive runtime information. - [SAFE]: The skill implements significant defensive measures, including forbidden synchronization paths, secret scanning requirements, and explicit prohibitions against publishing credentials, local paths, or internal service URLs (
references/release-sync.mdandreferences/security-boundary.md).
Audit Metadata