academic-pipeline
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a high-utility orchestrator for academic workflows. It includes extensive documentation on its state machine, integrity protocols, and reproducibility standards, all of which prioritize data correctness and user control.
- [COMMAND_EXECUTION]: Dispatches tasks to legitimate document processing utilities including
pandoc(for Markdown to DOCX/MD conversion) andtectonic(for LaTeX to PDF compilation). It also executes local helper scripts (e.g.,scripts/run_codex_audit.sh,scripts/check_literature_corpus_schema.py) to manage the workflow. - [EXTERNAL_DOWNLOADS]: Interacts with the
Semantic Scholar APIand performsWebSearchoperations to verify citations and academic claims. These operations are strictly scoped to the agent's primary purpose of academic integrity verification. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent processes untrusted data from literature corpora (via YAML Material Passports) and human reviewer feedback (text/PDF/DOCX).
- Boundary markers: Employs strict schema validation (JCS serialization) and 12-character hex hashes to verify state boundaries during cross-session resumes.
- Capability inventory: Capabilities include file system manipulation (advisory locking via
fcntl), subprocess execution for academic tooling, and targeted network access. - Sanitization: Incorporates a mandatory 5-phase integrity protocol (Stages 2.5 and 4.5) that uses automated cross-referencing to detect and block hallucinated content before it reaches the agent or the final output.
Audit Metadata