case-research

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/render-reader-formats.ts uses the node:child_process module to execute external binaries and system commands. It spawns a browser (such as Google Chrome, Chromium, Microsoft Edge, or Brave) to print PDF documents and uses system-level openers (open on macOS, cmd /c start on Windows, or xdg-open on Linux) to view generated files.
  • [DYNAMIC_EXECUTION]: The skill performs runtime generation and execution of code via its rendering script. scripts/render-reader-formats.ts dynamically creates an HTML environment, injects a Mermaid runner script, and executes it within a headless browser to render diagrams as SVGs for inclusion in the final documents.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a surface for potential indirect prompt injection attacks.
  • Ingestion points: Untrusted data enters the agent context from public sources such as annual reports, SEC filings, and news articles, as well as private interview transcripts stored in research/sources/public/ and research/sources/private/ respectively.
  • Boundary markers: The skill uses structured Markdown headings (## Source / Page), blockquotes for verbatim text, and specific status tags like [VERIFY] or [MISSING] to delimit and identify extracted content.
  • Capability inventory: Capabilities include writing multiple Markdown, HTML, and PDF files to the workspace, executing the render-reader-formats.ts script, spawning browser processes, and opening files using operating system commands.
  • Sanitization: The render-reader-formats.ts script implements HTML and attribute escaping (escapeHtml, escapeAttr) when converting source Markdown content to HTML.
  • [EXTERNAL_DOWNLOADS]: The rendering script references external resources and requires specific software to be present on the host system. It fetches the Mermaid diagramming library from the cdn.jsdelivr.net content delivery network. Additionally, it requires a web browser (Google Chrome or Chromium) to be installed on the default path or specified via environment variables to perform PDF printing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 02:43 AM