bgpt-paper-search
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and execute code from the npm registry using the
npxcommand for packagesbgpt-mcpandmcp-remote. These are standard methods for deploying MCP servers. - [COMMAND_EXECUTION]: Setup instructions include shell commands for configuring the agent host, specifically using
npxto launch the BGPT MCP server or connect to the remote SSE endpoint athttps://bgpt.pro/mcp/sse. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process full-text experimental data from external scientific papers, which represents a potential surface for indirect prompt injection.
- Ingestion points: Data is retrieved from the
bgpt.proAPI via thesearch_papersMCP tool and incorporated into the agent's context (SKILL.md). - Boundary markers: There are no explicit instructions to the agent to treat retrieved paper content as untrusted or to use delimiters to separate it from instructions.
- Capability inventory: The skill allows the agent to execute searches and report findings; it does not explicitly grant file-write or general network capabilities beyond the MCP server's scoped tool.
- Sanitization: No specific sanitization or filtering of the external study content is defined in the operating procedures.
Audit Metadata