hv-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python utility
scripts/md_to_pdf.pyto generate PDF reports from Markdown content. - [EXTERNAL_DOWNLOADS]: The skill fetches academic research data from the arXiv API (
export.arxiv.org), a well-known academic service. - [EXTERNAL_DOWNLOADS]: The skill requires standard Python packages (
weasyprint,markdown) to be installed via pip to support its core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from the web. Ingestion points: WebSearch, WebFetch, and the arXiv API. Boundary markers: None specified. Capability inventory: Local script execution and file write capabilities. Sanitization: None specified for external content.
Audit Metadata