reference-generator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard directory listing commands to identify the project structure for automation purposes.
- [EXTERNAL_DOWNLOADS]: The skill performs web requests to verify the validity and accessibility of academic references. This is a core functional requirement for generating verified citations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-local files such as course descriptions and chapter content to generate relevant reference lists. While this presents an ingestion surface for untrusted data, the risk is mitigated by the skill's use of a rigid output template and the context of processing internal project files.
Audit Metadata