case-peer-review

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to execute a local script scripts/render-reader-formats.ts using node. This script is responsible for generating HTML and PDF versions of the review reports. The script further uses child_process.spawn to launch headless Chrome or Chromium to perform the PDF printing and diagram rendering tasks.
  • [DYNAMIC_EXECUTION]: The render-reader-formats.ts script dynamically assembles HTML documents from Markdown content. It injects a JavaScript 'runner' into the HTML to initialize and execute the Mermaid.js library within a headless browser environment. It also uses the --allow-file-access-from-files flag for Chrome, which is necessary for local rendering but expands the process's access.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted text files provided by the user (case.md, teaching-note.md, and evidence packs). As the agent reads these files to apply peer-review checklists, there is a risk that malicious instructions embedded within the business case text could influence the agent's behavior, critique, or the subsequent steps in the case-writing pipeline.
  • Ingestion points: case.md, teaching-note.md, research/manual-evidence-brief.md, and other files in the research/ evidence pack.
  • Boundary markers: The instructions recommend labeling the output as a 'simulated review', but they do not define strict delimiters or 'ignore' instructions for the agent when processing the input manuscripts.
  • Capability inventory: The skill has the capability to write files, read local state/configuration, and execute shell commands via the node script and spawned browser processes.
  • Sanitization: The rendering script includes basic HTML entity escaping (escapeHtml, escapeAttr) and a safeUrl function to restrict URL protocols to http, https, and mailto during rendering.
  • [EXTERNAL_DOWNLOADS]: The rendering script is configured to fetch the Mermaid.js library from the jsDelivr CDN (https://cdn.jsdelivr.net/npm/mermaid@12.0.0/dist/mermaid.min.js) if it is not found in the local node_modules. This is a well-known service used for the intended purpose of diagram generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 02:43 AM