research-literature-search
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves literature metadata from well-known academic services including OpenAlex, Crossref, and Semantic Scholar.
- Evidence: API requests are implemented in
scripts/providers/openalex.py,scripts/providers/crossref.py, andscripts/providers/semantic_scholar.pyusing therequestslibrary. - [COMMAND_EXECUTION]: The skill provides utility scripts for running searches and validating results locally.
- Evidence:
scripts/search_runner.pyacts as a CLI runner, and documentation inREADME.mdandSKILL.mdprovides examples of its usage viapython3commands. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external research data which could theoretically contain malicious instructions. The risk is mitigated by treating the data as structured content and using extensive safeguards.
- Ingestion points:
scripts/providers/handles API responses containing titles and abstracts from third-party academic sources. - Boundary markers: Output is strictly formatted into JSONL artifacts validated against the
rls.paper.v1schema to prevent context leakage. - Capability inventory: Subprocess calls are limited to the skill's own internal scripts; file system access is restricted to the local workspace.
- Sanitization:
scripts/search_runner.pyincludes a_safe_errorfunction that redacts API keys and URLs from logs. Additionally,scripts/manifest.pyusessafe_relativeand_safe_bundle_dirto enforce strict path boundaries and prevent traversal.
Audit Metadata