patent-assistant
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied technical descriptions to generate documents and perform searches, which establishes a surface for indirect prompt injection.
- Ingestion points: Technical descriptions are ingested through
scripts/generate_disclosure.pyandscripts/patent_search.pyvia command-line arguments and file inputs. - Boundary markers: Technical content is delimited using Markdown headers in the generated technical disclosure templates.
- Capability inventory: The skill performs network reads for patent data and local file writes for generated documents.
- Sanitization: Search queries are URL-encoded in
scripts/patent_search.pyto ensure web request safety. - [EXTERNAL_DOWNLOADS]: The
scripts/patent_search.pyscript communicates with legitimate external patent databases and academic search engines, including Google Patents, Lens.org, Espacenet, and CNIPA, to retrieve search results based on user-provided queries. - [COMMAND_EXECUTION]: The skill utilizes local Python scripts to execute its core functionality. These scripts are invoked by the agent as documented and rely exclusively on the Python standard library without calling dangerous external binaries.
Audit Metadata