academic-paper
Warn
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes a
visualization_agentand aVLM Figure Verification Protocolthat involve generating and executing code. - Evidence: In
agents/visualization_agent.mdandreferences/vlm_figure_verification.md, the skill describes generating Python (matplotlib,seaborn) and R (ggplot2) code to visualize results. The VLM verification step explicitly includes an 'Execute code to render figure image' phase where the generated code is run. - [INDIRECT_PROMPT_INJECTION]: The skill has a large surface for ingesting untrusted data which could influence agent logic.
- Ingestion points:
agents/revision_coach_agent.mdis designed to parse unstructured reviewer comments from any source (email, PDF pastes), andagents/intake_agent.mdprocesses user-supplied past writing samples for style calibration. - Capability inventory: The skill has the ability to generate and execute code, perform file operations, and produce complex reasoning outputs based on these untrusted inputs.
- Sanitization: There is no documented mechanism for filtering or sanitizing the content of these external inputs before they are used to influence the drafting and code generation phases.
Audit Metadata