get-paper
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill navigates to and retrieves research information from Google Scholar (scholar.google.com), a well-known service.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill ingests paper titles, author metadata, and citation strings from external search results and BibTeX pages via browser snapshots. 2. Boundary markers: No specific delimiters are implemented to separate external data from agent instructions. 3. Capability inventory: The skill uses browser automation tools and possesses file read/write access to project-specific BibTeX files. 4. Sanitization: There is no explicit sanitization of the retrieved metadata before it is displayed to the user or written to the filesystem.
Audit Metadata