peer-review
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute local Python scripts (scripts/generate_schematic.pyandskills/scientific-slides/scripts/pdf_to_images.py) to facilitate document processing and scientific visualization tasks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external documents (manuscripts, grants, and PDFs) which represents a surface for indirect prompt injection attacks. 1. Ingestion points: Scientific manuscripts and PDF presentation files processed by the agent. 2. Boundary markers: The skill lacks explicit instructions or delimiters to prevent the agent from obeying potentially malicious commands embedded within research documents. 3. Capability inventory: The skill has access to the
Read,Write,Edit, andBashtools. 4. Sanitization: No input validation or sanitization is described for the text extracted from documents before it is used in the evaluation workflow.
Audit Metadata