writing
Warn
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands, including
wcfor word counting,pdflatexandbibtexfor compiling documents, andconvertorpdftoppmfor processing PDF pages into images.\n- [DYNAMIC_EXECUTION]: The instructions include a specific Python code snippet to be executed viapython -cwhich performs document processing using thepdf2imagelibrary.\n- [EXTERNAL_DOWNLOADS]: The skill performs runtime installation of thepdf2imagePython package usinguv addand retrieves external data through research tools likeparallel-webandresearch-lookup.\n- [PROMPT_INJECTION]: The instructions include directives aimed at overriding the agent's default operational boundaries, such as 'ALWAYS complete the ENTIRE task without stopping', 'NEVER ask "Would you like me to continue?"', and 'Token usage is unlimited'.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted research data from external websites and academic papers, presenting an injection surface.\n - Ingestion points: Web search results and academic paper metadata/content retrieved via external tools.\n
- Boundary markers: None provided; the instructions do not include delimiters or specific guidance to ignore embedded instructions in external data.\n
- Capability inventory: The skill has access to the local file system, shell command execution, Python runtime, and various specialized analysis tools.\n
- Sanitization: No evidence of content sanitization or filtering before external data is incorporated into documents or saved to disk.
Audit Metadata