research-knowledge-graph
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata which could be used as an injection vector.
- Ingestion points: The script
scripts/build_graph.pyreads metadata from user-provided bibliography files and the OpenAlex API. - Boundary markers: No specific delimiters are used in the generated Markdown vault files to distinguish metadata from potential instructions.
- Capability inventory: The skill writes various graph data files and Markdown notes to the local system.
- Sanitization: The script uses standard formatting but does not sanitize research titles or topics against prompt injection patterns.
- [EXTERNAL_DOWNLOADS]: The skill fetches scholarly metadata from a remote source.
- Evidence:
scripts/build_graph.pyqueriesapi.openalex.orgfor paper details. - Context: OpenAlex is a well-known scholarly metadata repository, and its use is standard for science mapping tasks.
Audit Metadata