hypothesis-generation
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's components are dedicated to scientific methodology and professional reporting. No malicious logic, obfuscation, or data exfiltration attempts were observed. The skill description and metadata are consistent with its functionality.- [COMMAND_EXECUTION]: The workflow incorporates Bash commands for compiling LaTeX documents (xelatex) and generating schematics (python scripts/generate_schematic.py). These are standard operations for generating scientific reports and do not indicate malicious intent.- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection by ingesting data from external web sources such as PubMed and Google Scholar.
- Ingestion points: Data retrieved via WebFetch and WebSearch from scientific literature sources.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in retrieved data.
- Capability inventory: The skill has access to Bash execution and file manipulation tools (Edit, Write).
- Sanitization: No sanitization or validation of the fetched scientific content is specified.
Audit Metadata