hypogenic
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires executing several shell commands for installation and operation, including package installation via
uv pip, repository cloning viagit, and running internal setup scripts likesetup_grobid.shandrun_grobid.sh.\n- [EXTERNAL_DOWNLOADS]: The skill downloads datasets and code from external sources including GitHub repositories (ChicagoHAI) and the PyPI registry for thehypogenicpackage.\n- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection during its hypothesis generation and inference workflows.\n - Ingestion points: The skill processes untrusted data from user-provided JSON datasets and research literature PDFs.\n
- Boundary markers: Prompt templates in the configuration use direct interpolation (e.g.,
{sample_text}) without implementing strong boundary delimiters or instructions to ignore embedded commands.\n - Capability inventory: The ingested data is used to drive LLM-based hypothesis generation, refinement, and validation via the
hypogenicAPI and CLI.\n - Sanitization: No specific mechanisms for input sanitization or validation are provided to filter out instructions that may be embedded within datasets or literature.
Audit Metadata