review-response
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests and processes reviewer comments, creating a surface for indirect prompt injection attacks where malicious instructions in the review text could influence agent behavior.
- Ingestion points: Reviewer comments are ingested as primary data in the classification and strategy steps (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or isolation prompts to distinguish reviewer text from system instructions.
- Capability inventory: The agent can perform file writes to the correspondence directory and invoke the proofread skill.
- Sanitization: No validation or sanitization of the review content is performed.
- [COMMAND_EXECUTION]: The skill provides instructions for modifying build configuration scripts that allow arbitrary command execution.
- Evidence: The skill instructions in SKILL.md suggest appending a snippet to the project's .latexmkrc file.
- Risk: The .latexmkrc file is a Perl script executed by the latexmk build tool; appending arbitrary code allows for shell command execution during the document compilation process.
Audit Metadata