thesis-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external research material, which introduces a vulnerability surface for indirect prompt injection.
- Ingestion points: The workflow defined in SKILL.md (Steps 1, 3, and 4) explicitly requests and processes "existing material," "literature," "data," and "survey results" provided by the user.
- Boundary markers: There are no instructions defining delimiters or explicit warnings for the agent to ignore commands that may be embedded within the provided research documents.
- Capability inventory: The skill has the capability to generate and deliver formatted Word documents using internal platform tools.
- Sanitization: The instructions lack requirements for sanitizing, escaping, or validating the user-provided data before it is incorporated into the generated chapters and outlines.
- [NO_CODE]: The skill consists solely of natural language instructions and does not include any Python scripts, Node.js packages, or executable shell commands, which limits the direct execution of malicious logic.
Audit Metadata