academic-pipeline

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is a high-utility orchestrator for academic workflows. It includes extensive documentation on its state machine, integrity protocols, and reproducibility standards, all of which prioritize data correctness and user control.
  • [COMMAND_EXECUTION]: Dispatches tasks to legitimate document processing utilities including pandoc (for Markdown to DOCX/MD conversion) and tectonic (for LaTeX to PDF compilation). It also executes local helper scripts (e.g., scripts/run_codex_audit.sh, scripts/check_literature_corpus_schema.py) to manage the workflow.
  • [EXTERNAL_DOWNLOADS]: Interacts with the Semantic Scholar API and performs WebSearch operations to verify citations and academic claims. These operations are strictly scoped to the agent's primary purpose of academic integrity verification.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The agent processes untrusted data from literature corpora (via YAML Material Passports) and human reviewer feedback (text/PDF/DOCX).
  • Boundary markers: Employs strict schema validation (JCS serialization) and 12-character hex hashes to verify state boundaries during cross-session resumes.
  • Capability inventory: Capabilities include file system manipulation (advisory locking via fcntl), subprocess execution for academic tooling, and targeted network access.
  • Sanitization: Incorporates a mandatory 5-phase integrity protocol (Stages 2.5 and 4.5) that uses automated cross-referencing to detect and block hallucinated content before it reaches the agent or the final output.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 02:30 AM