idea-spark
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- Command execution for custom model integration: The skill allows users to configure custom LLM execution commands through environment variables such as
NOVELTY_LLM_REASONING_LARGE_CMDandNOVELTY_LLM_CLASSIFY_FAST_CMD. These commands are executed viasubprocess.runwithshell=Truein several scripts (run.py,pattern_summary.py,intent.py). While this enables flexibility for integrating different AI backends, it is a potential consideration if the environment configuration is accessible to untrusted actors. - Retrieval and processing of external literature: The skill automatically fetches research paper data from public academic repositories including arXiv, Semantic Scholar, OpenAlex, and OpenReview. This creates a potential surface for indirect prompt injection, where adversarial text embedded within a research paper could attempt to influence the agent's logic. The skill uses detailed system prompts and specific "Hard rules" as mitigation strategies to maintain process integrity.
- Automated downloads from established services: The skill's workflow includes downloading paper metadata and full-text sections (via
fetch_sections.py) from reputable academic platforms. This behavior is central to the skill's purpose of ensuring research ideas are grounded in existing literature. - Dynamic module verification: During initialization and diagnostics, the skill uses
importlib.import_moduleinrun.pyto check for the presence of required Python dependencies. This dynamic approach is used to provide clear feedback and setup guidance to the user.
Audit Metadata