research-citation-check
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external scripts using
subprocess.runwithinscripts/run_ai_alignment.py. It calls Python scripts (compile_latex_with_bibtex.pyandconvert_latex_to_word.py) located in theresearch-literature-reviewdependency skill directory to perform document rendering. This is a primary function of the skill and uses localized paths derived from the platform's skill installation environment. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by processing content from untrusted LaTeX, BibTeX, and PDF files.
- Ingestion points: Data is ingested from user-provided research documents in
scripts/run_ai_alignment.pyviaparse_latex_document,parse_bib_file, andextract_pdf_text. - Boundary markers: The skill structures data into a JSON format (
ai_alignment_input.json) for the agent context but lacks explicit instruction-isolation delimiters or 'ignore' warnings within the individual text fields. - Capability inventory: The skill has the capability to write files to the workspace and execute shell commands via
subprocess.run. - Sanitization: The skill performs basic text truncation and regex-based sentence splitting but does not implement active filtering or sanitization of potential instructions embedded in the source research documents.
Audit Metadata