grant-writing
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/fetch-niaid-samples.shscript downloads sample grant applications and reviewer summary statements from the official National Institutes of Health (NIH) NIAID domain (niaid.nih.gov). These downloads target a well-known and trusted government service. - [DYNAMIC_EXECUTION]: The skill uses the
uvxtool runner to dynamically fetch and execute theopenciteandmarkitdownpackages from PyPI. These are used for literature searches and converting PDF samples into markdown format. - [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to ingest and parse external Notice of Funding Opportunity (NOFO) documents provided by the user via URL.
- Ingestion points: Content from external NOFO documents.
- Boundary markers: None identified in the skill instructions for segregating untrusted NOFO content.
- Capability inventory: File system access (creating proposal directories and drafting files), shell script execution (
fetch-niaid-samples.sh), and external tool invocation (uvx). - Sanitization: No specific sanitization or filtering of NOFO content is mentioned.
- [COMMAND_EXECUTION]: The skill contains a bash script (
scripts/fetch-niaid-samples.sh) designed to automate the retrieval and processing of reference materials from the NIH website.
Audit Metadata