scholar-sidekick-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
npxutility to download and run thescholar-sidekick-clipackage from the NPM registry. - [COMMAND_EXECUTION]: The skill executes the
scholarcommand-line tool to perform bibliographic tasks, resolve metadata, and check retraction status. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including scholarly identifiers, paper titles, and bibliography files (BibTeX, RIS, CSL-JSON), which could contain adversarial instructions aimed at influencing the agent's behavior.
- Ingestion points: Identifiers passed to
format/resolve, titles provided to theverifycommand, and local bibliography files read by theauditcommand. - Boundary markers: The instructions do not specify any boundary markers or delimiters to protect against instructions embedded within paper metadata.
- Capability inventory: Shell execution of the CLI tool and reading of the resulting output strings.
- Sanitization: The skill does not mention any validation or filtering of the content retrieved from the scholarly records or external files before it is processed by the agent.
Audit Metadata