bear-onboard

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external Node.js package scimaster-cli via npm (npm install -g scimaster-cli) to perform its core functions.
  • [COMMAND_EXECUTION]: The skill executes shell commands using the sci CLI tool, including sci --version, sci init, and sci search with various parameters to retrieve research data.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted external data (academic abstracts) returned by the search tool and reformats them for the final report.
  • Ingestion points: Data enters the context via the abstract fields in the JSON results of sci search commands.
  • Boundary markers: None identified; search results are integrated directly into the markdown and HTML report generation process.
  • Capability inventory: The agent can execute shell commands via the sci tool and perform file system writes to create the {topic-slug}/ directory and associated report files.
  • Sanitization: No specific sanitization or filtering of the retrieved abstract content is mentioned before it is translated or reformatted into the report.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:38 PM
Security Audit — agent-trust-hub — bear-onboard