literature
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/literature_cli.pyimplements a custom bootstrapping mechanism in the_bootstrap_ane_packagefunction. This function dynamically modifiessys.pathby searching for theane_packagedirectory across multiple locations, including environment variables, parent directories, and hardcoded user paths. This allows the script to load modules from paths computed at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted content from the OpenAlex API, such as scholarly titles and abstracts.
- Ingestion points: External data enters through the
OpenAlexClientand is formatted for display inscripts/literature_cli.py. - Boundary markers: Output lines are structured using
|as a delimiter, and metadata like year and citation counts are explicitly separated from titles. - Capability inventory: The CLI tool's capabilities include printing to standard output and environment bootstrapping; the consuming agent manages the resulting data.
- Sanitization: Titles are truncated to 90 characters in
scripts/literature_cli.py, and the output streams are reconfigured to handle encoding errors using replacement characters. - [EXTERNAL_DOWNLOADS]: The skill is designed to interact with external scholarly databases.
- Evidence: It performs network operations to the OpenAlex API and provides an optional escalation path to the Consensus search engine via the
mcp__claude_ai_Consensus__searchtool. Both are established services for academic literature discovery.
Audit Metadata