literature-search-europepmc
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes full-text scientific articles and PDFs from external sources via Europe PMC. This untrusted data is ingested into the agent's context, creating a surface for potential indirect prompt injection where adversarial text in a paper could attempt to override agent instructions.
- Ingestion points:
scripts/europepmc_api.pydownloads external content via theget_fulltextanddownload_pdfcommands. - Boundary markers: None explicitly mentioned in the processing script to distinguish paper content from instructions.
- Capability inventory: The skill performs network requests and writes data to the local filesystem.
- Sanitization: The script performs XML tag stripping but does not sanitize the text content for potential prompt injection patterns.
- [EXTERNAL_DOWNLOADS]: The skill communicates with official Europe PMC and EMBL-EBI domains (
europepmc.organdebi.ac.uk) to fetch scientific metadata and literature. - [COMMAND_EXECUTION]: The skill uses
uv runto execute the local utilityscripts/europepmc_api.pywhich facilitates all interactions with the Europe PMC API.
Audit Metadata