paper-cluster-by-theme
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of research paper titles and abstracts. This creates a potential surface for indirect prompt injection, although the impact is negligible as the skill lacks dangerous capabilities.
- Ingestion points: Step 1 instructions involve reading paper metadata including abstracts and titles.
- Boundary markers: The workflow does not define specific delimiters or 'ignore instructions' markers for the input data.
- Capability inventory: The skill does not utilize any subprocess calls, file-write operations, or network requests.
- Sanitization: There are no explicit instructions for sanitizing or validating the ingested paper content.
Audit Metadata