medrxiv-search
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata such as titles and abstracts from the external medRxiv API. This creates a potential surface for indirect prompt injection if research content contains malicious instructions designed to influence the AI agent.\n
- Ingestion points: Untrusted content is fetched from api.medrxiv.org in cli/src/commands/search.ts and cli/src/commands/doi.ts.\n
- Boundary markers: The skill does not currently implement specific delimiters to isolate API-provided text from the agent's instruction context.\n
- Capability inventory: The impact is mitigated by the skill's restricted environment; the tool only performs read-only network requests and does not have access to sensitive local files or system commands.\n
- Sanitization: Paper abstracts are processed and displayed as raw text without specific filtering for prompt injection patterns.
Audit Metadata