paper-reader

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious instructions, obfuscated code, or unauthorized data access patterns were found in the skill files. All operations appear consistent with the stated purpose of paper analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external text data (academic papers) for analysis. While this is a potential ingestion point for malicious instructions, the skill does not use high-risk tools such as network requests, file system writes, or shell execution, neutralizing the risk of exploitation.
  • Ingestion points: External paper content processed in SKILL.md and scripts/pdf-processor.py.
  • Boundary markers: Instructions do not define specific delimiters for separating paper content from agent instructions.
  • Capability inventory: No risky capabilities detected; the Python script performs local string manipulation only.
  • Sanitization: No explicit sanitization of the input text is implemented before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 07:05 PM
Security Audit — agent-trust-hub — paper-reader