research-summarizer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted document content (academic papers, articles, reports), which naturally creates a surface for indirect prompt injection.
- Ingestion points: Document text ingested for analysis via the
/research:summarize,/research:compare, and/research:citeworkflows. - Boundary markers: The skill instructions do not explicitly implement delimiters or ignore-instructions for the processed source text.
- Capability inventory: The skill utilizes local Python scripts (
scripts/extract_citations.pyandscripts/format_summary.py) to parse and format document data. - Sanitization: No explicit filtering or instruction-scrubbing is performed in the provided scripts before the text is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill's installation documentation includes references to external repositories and registries for acquisition.
- Evidence: Mentions of
github.com/alirezarezvani/claude-skills.gitand theclawhubregistry. These references are documented as part of the standard installation process and are attributed to the skill's author.
Audit Metadata