nature-paper-to-patent
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided scientific papers and technical reports, which introduces a potential attack surface for indirect prompt injection if those documents contain malicious instructions designed to subvert agent behavior.
- Ingestion points:
scripts/extract_pdf_text.pyextracts text from user-provided PDF files for analysis. - Boundary markers:
static/core/principles.mddefines a core principle to treat source papers as technical evidence rather than as instructions or claim language. - Capability inventory: The skill has the capability to write various file formats (DOCX, JSON, TXT, SVG, PNG) and execute internal scripts via subprocess calls.
- Sanitization: No explicit sanitization or filtering is performed on the extracted text before it is processed by the AI agent.
- [COMMAND_EXECUTION]: The script
scripts/build_patent_package.pyuses thesubprocessmodule to coordinate the execution of other scripts within the package, includingrender_flowchart_svg.pyandrender_patent_docx.py. - [DYNAMIC_EXECUTION]:
scripts/build_patent_package.pyutilizesimportlib.utilto dynamically load and execute functions from local scriptsvalidate_patent_draft.pyandaudit_claims.pyto perform validation and auditing tasks.
Audit Metadata