research-ideation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from web search results and academic PDFs to generate research summaries and proposals.
- Ingestion points: The skill ingests web search snippets and paper metadata via WebSearch, as well as PDF full-text extracted via the
zotero_get_item_fulltexttool as described inreferences/zotero-integration-guide.md. - Boundary markers: The skill utilizes logical verification steps such as the 'Claim Promotion Gate' in
references/research-contract.mdto evaluate evidence strength, but lacks explicit structural delimiters to isolate raw external text from agent instructions during the ingestion process. - Capability inventory: The skill has the ability to write local markdown files (e.g.,
research-proposal.md) and modify the user's Zotero library through the MCP server tools. - Sanitization: No explicit sanitization or escaping of external content is specified before interpolation into research artifacts.
- [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of academic papers and PDF attachments from well-known academic repositories and services.
- Evidence: The
zotero_add_items_by_identifierandzotero_find_and_attach_pdfstools fetch literature from academic registries and services (such as arXiv and Unpaywall) as documented inreferences/zotero-integration-guide.md.
Audit Metadata