scientific-literature-search
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from web pages and PDF documents (Step 5: Deep dive into key papers). This creates a potential surface where the agent might process hidden instructions embedded in scientific content from the web.
- Ingestion points:
SKILL.mddescribes methods for extracting text from URLs usingtrafilaturaand PDFs usingpypdf. - Boundary markers: The provided code snippets do not include explicit delimiter-based isolation for the extracted content.
- Capability inventory: The skill leverages network capabilities via
requestsand file system access to write supplementary materials. - Sanitization: No explicit sanitization or instruction-filtering logic is present for the retrieved text.
- [EXTERNAL_DOWNLOADS]: The skill instructions and code examples reference fetching data and metadata from well-known and reputable scientific sources.
- Evidence: Mentions and provides code for interacting with
api.crossref.org,arxiv.org,nature.com, andpubmed.ncbi.nlm.nih.govusing official APIs or standard libraries.
Audit Metadata