academic-chapter-writer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its core functionality of ingesting and processing data from external sources.
- Ingestion points: The skill retrieves data from the external
PubMedMCP tool via thesearch_articlesandget_article_metadatafunctions (referenced inSKILL.md). - Boundary markers: The instructions do not define clear delimiters or "ignore instructions" wrappers for data returned from the PubMed tool.
- Capability inventory: The agent has network access (via the PubMed tool) and the ability to generate and format large volumes of markdown content.
- Sanitization: There is no evidence of sanitization or strict schema validation for the metadata retrieved from PubMed before it is interpolated into the agent's writing workflow.
Audit Metadata