literature-review
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of parallel-cli by fetching a script from
parallel.ai. This is a well-known service providing the academic search tools used throughout the skill's workflow. - [COMMAND_EXECUTION]: The script
scripts/generate_pdf.pyuses thesubprocessmodule to invoke system-level tools such aspandocandxelatexfor converting markdown content into professionally formatted PDF documents. - [COMMAND_EXECUTION]: The script
scripts/generate_schematic.pyexecutes internal Python components via subprocess to coordinate AI-powered diagram generation and refinement. - [INDIRECT_PROMPT_INJECTION]: The skill processes research data, abstracts, and citations from external academic databases, which constitutes a surface for potential prompt injection if malicious content is embedded in the processed literature.
- Ingestion points:
scripts/verify_citations.py(markdown file),scripts/search_databases.py(JSON search results), andscripts/generate_pdf.py(markdown document). - Boundary markers: Relies on structured templates and script-based parsing but does not include explicit 'ignore instructions' delimiters for all dynamic content.
- Capability inventory: Subprocess execution in
scripts/generate_pdf.pyand network operations inscripts/verify_citations.pyfor metadata retrieval. - Sanitization: Implements regex-based filtering for DOI extraction and uses structured JSON handling to mitigate risks from malformed inputs.
- [DYNAMIC_EXECUTION]: The
scripts/generate_schematic_ai.pyscript dynamically constructs prompts sent to an external AI model (OpenRouter) to generate and critique scientific schematics based on user descriptions.
Audit Metadata