idea-generation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests research paper data from the Semantic Scholar API and interpolates it into prompts for novelty assessment. While the risk is present whenever processing external data, the skill uses standard mitigation practices.
- Ingestion points: The
novelty_check.pyscript retrieves paper titles and abstracts from Semantic Scholar, which are then passed into prompt templates inreferences/ideation-prompts.mdusing the{last_query_results}variable. - Boundary markers: The prompt templates utilize triple quotes (
""") and XML-style tags (<experiment.py>) to delimit external content from instructions. - Capability inventory: The skill executes a local Python script which performs network operations to external APIs to retrieve data.
- Sanitization: No explicit sanitization or filtering of the retrieved paper abstracts is performed before they are interpolated into the LLM prompts.
- [EXTERNAL_DOWNLOADS]: The
novelty_check.pyscript makes network requests to the Semantic Scholar official API (api.semanticscholar.org) to retrieve research literature. This is a well-known service and the operation is central to the skill's stated purpose of checking research novelty.
Audit Metadata