case-peer-review
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a local script
scripts/render-reader-formats.tsusingnode. This script is responsible for generating HTML and PDF versions of the review reports. The script further useschild_process.spawnto launch headless Chrome or Chromium to perform the PDF printing and diagram rendering tasks. - [DYNAMIC_EXECUTION]: The
render-reader-formats.tsscript dynamically assembles HTML documents from Markdown content. It injects a JavaScript 'runner' into the HTML to initialize and execute the Mermaid.js library within a headless browser environment. It also uses the--allow-file-access-from-filesflag for Chrome, which is necessary for local rendering but expands the process's access. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted text files provided by the user (
case.md,teaching-note.md, and evidence packs). As the agent reads these files to apply peer-review checklists, there is a risk that malicious instructions embedded within the business case text could influence the agent's behavior, critique, or the subsequent steps in the case-writing pipeline. - Ingestion points:
case.md,teaching-note.md,research/manual-evidence-brief.md, and other files in the research/ evidence pack. - Boundary markers: The instructions recommend labeling the output as a 'simulated review', but they do not define strict delimiters or 'ignore' instructions for the agent when processing the input manuscripts.
- Capability inventory: The skill has the capability to write files, read local state/configuration, and execute shell commands via the
nodescript and spawned browser processes. - Sanitization: The rendering script includes basic HTML entity escaping (
escapeHtml,escapeAttr) and asafeUrlfunction to restrict URL protocols tohttp,https, andmailtoduring rendering. - [EXTERNAL_DOWNLOADS]: The rendering script is configured to fetch the Mermaid.js library from the jsDelivr CDN (
https://cdn.jsdelivr.net/npm/mermaid@12.0.0/dist/mermaid.min.js) if it is not found in the localnode_modules. This is a well-known service used for the intended purpose of diagram generation.
Audit Metadata