curate-terminology
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the Hugging Face CLI (
hf papers) for searching and reading research papers, which is a well-known service for literature discovery. - Evidence: Found in
SKILL.mdandreferences/source-verification.mdwhere instructions guide the agent to usehf papers search,hf papers info, andhf papers readsubcommands for terminology research. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest information from external research papers and project documentation, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Research papers retrieved through the Hugging Face CLI and external project documentation from well-known domains such as
kubernetes.ioandhelm.shas described inreferences/expression-research.md. - Boundary markers: The skill requires the agent to record all sources in
docs/terminology/references.mdand link each glossary entry to its corresponding source record as specified inreferences/records-and-layout.md. - Capability inventory: The skill is authorized to update markdown files within the project's documentation directory (
docs/terminology/) and execute thehfcommand-line tool. - Sanitization: Instructions include explicit mandates to check for accountable authorship, trace definitions to primary work, and apply heightened scrutiny to AI-related projects to ensure the quality and safety of the curated content.
Audit Metadata