peer-review
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/generate_schematic.pyto invoke a secondary AI generation script. This is an expected behavior for the skill's schematic generation feature.\n- [EXTERNAL_DOWNLOADS]: The scriptscripts/generate_schematic_ai.pymakes network requests toopenrouter.aito access LLM services for image generation and review. OpenRouter is a well-known service for AI model aggregation.\n- [PROMPT_INJECTION]: The skill is designed to ingest and process external scientific manuscripts. Since the skill is grantedBashandWritecapabilities, a malicious manuscript could contain instructions to exploit the agent's environment.\n - Ingestion points: Reading manuscript content and presentation slides as described in
SKILL.md.\n - Boundary markers: None identified; the skill does not explicitly instruct the agent to ignore instructions embedded in the manuscripts.\n
- Capability inventory: Access to
Bash,Read,Write, andEdittools; network access via internal Python scripts.\n - Sanitization: No specific sanitization or filtering of manuscript content is mentioned in the provided scripts or instructions.
Audit Metadata