scientific-illustrations
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes plotting code to render quantitative figures from user-supplied data.
- Evidence: The 'Plotter' role brief in
references/agent-prompts.mdexplicitly instructs the agent to "Write and run the plotting code." - [DYNAMIC_EXECUTION]: The skill uses the
execute_codetool to interact with the Penpot API for advanced operations like SVG export. - Evidence:
references/penpot-redraw.mdnotes that SVG export can be performed viaexecute_codeusingshape.export({type: "svg", scale: 1}). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data which is subsequently interpolated into instructions for planning, styling, and image generation.
- Ingestion points: User-provided source material and intent are recorded in
brief.mdas described inSKILL.md. - Boundary markers: The skill utilizes structured role briefs in
references/agent-prompts.mdto scope agent tasks, though it does not define specific delimiters for separating user content from instructions. - Capability inventory: The skill possesses code execution capabilities through the Plotter role and the Penpot MCP integration.
- Sanitization: Instructions emphasize following the user's supplied references as authoritative but do not detail specific sanitization or escaping of external content.
Audit Metadata