novelty-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts to perform novelty assessments and literature searches.
- Evidence: Running
novelty_check.pyandsearch_semantic_scholar.pylocated within local environment directories (~/.claude/skills/). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text descriptions of research ideas, which creates an indirect prompt injection surface if user-supplied descriptions contain hidden instructions.
- Ingestion points: External research idea inputs enter via
$0or the--ideaargument inSKILL.mdand are interpolated into{idea_description}withinreferences/assessment-prompts.md. - Boundary markers: Absent; there are no specialized delimiters or structural instructions to prevent the model from obeying instructions wrapped inside a malicious research proposal input.
- Capability inventory: The skill interacts with local command lines by executing automated check scripts and query generation scripts.
- Sanitization: Absent; input text is passed into the prompt templates and command line arguments without escaping or verification mechanisms.
Audit Metadata