paper-reducer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary user-provided academic text, which serves as a potential vector for instructions embedded in the data to influence agent behavior.
- Ingestion points: User-supplied paper segments or full text ingested for assessment and rewriting (SKILL.md).
- Boundary markers: The skill does not specify the use of delimiters or specific warnings to ignore instructions that might be contained within the input text.
- Capability inventory: The agent is limited to linguistic analysis and text transformation; it does not have access to file-system writes, network operations, or shell execution.
- Sanitization: No explicit sanitization or filtering of external content is described before interpolation into the agent's context.
Audit Metadata