case-research
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/render-reader-formats.tsuses thenode:child_processmodule to execute external binaries and system commands. It spawns a browser (such as Google Chrome, Chromium, Microsoft Edge, or Brave) to print PDF documents and uses system-level openers (openon macOS,cmd /c starton Windows, orxdg-openon Linux) to view generated files. - [DYNAMIC_EXECUTION]: The skill performs runtime generation and execution of code via its rendering script.
scripts/render-reader-formats.tsdynamically creates an HTML environment, injects a Mermaid runner script, and executes it within a headless browser to render diagrams as SVGs for inclusion in the final documents. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: Untrusted data enters the agent context from public sources such as annual reports, SEC filings, and news articles, as well as private interview transcripts stored in
research/sources/public/andresearch/sources/private/respectively. - Boundary markers: The skill uses structured Markdown headings (
## Source / Page), blockquotes for verbatim text, and specific status tags like[VERIFY]or[MISSING]to delimit and identify extracted content. - Capability inventory: Capabilities include writing multiple Markdown, HTML, and PDF files to the workspace, executing the
render-reader-formats.tsscript, spawning browser processes, and opening files using operating system commands. - Sanitization: The
render-reader-formats.tsscript implements HTML and attribute escaping (escapeHtml,escapeAttr) when converting source Markdown content to HTML. - [EXTERNAL_DOWNLOADS]: The rendering script references external resources and requires specific software to be present on the host system. It fetches the Mermaid diagramming library from the
cdn.jsdelivr.netcontent delivery network. Additionally, it requires a web browser (Google Chrome or Chromium) to be installed on the default path or specified via environment variables to perform PDF printing.
Audit Metadata