bgpt-paper-search
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing and running the
bgpt-mcppackage from the npm registry usingnpxas an alternative setup method. - [REMOTE_CODE_EXECUTION]: Instructions provide a configuration for the agent to connect to a remote MCP server endpoint (
https://bgpt.pro/mcp/sse), which executes logic on a remote server controlled by the vendor. - [COMMAND_EXECUTION]: Setup instructions include shell commands (
npx) to configure the environment and run the BGPT tool. - [PROMPT_INJECTION]: The skill facilitates the ingestion of full-text data from scientific studies, creating a surface for indirect prompt injection attacks.
- Ingestion points: Data retrieved from the
search_paperstool (referenced in SKILL.md). - Boundary markers: Absent. The instructions do not specify the use of delimiters or markers to isolate retrieved paper content from the agent's core instructions.
- Capability inventory: The skill allows access to the
Bashtool (defined in SKILL.md frontmatter). - Sanitization: Absent. No logic or instruction is provided for sanitizing or validating the quantitative and qualitative data retrieved from external papers.
Audit Metadata