grant-writing

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/fetch-niaid-samples.sh script downloads sample grant applications and reviewer summary statements from the official National Institutes of Health (NIH) NIAID domain (niaid.nih.gov). These downloads target a well-known and trusted government service.
  • [DYNAMIC_EXECUTION]: The skill uses the uvx tool runner to dynamically fetch and execute the opencite and markitdown packages from PyPI. These are used for literature searches and converting PDF samples into markdown format.
  • [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to ingest and parse external Notice of Funding Opportunity (NOFO) documents provided by the user via URL.
  • Ingestion points: Content from external NOFO documents.
  • Boundary markers: None identified in the skill instructions for segregating untrusted NOFO content.
  • Capability inventory: File system access (creating proposal directories and drafting files), shell script execution (fetch-niaid-samples.sh), and external tool invocation (uvx).
  • Sanitization: No specific sanitization or filtering of NOFO content is mentioned.
  • [COMMAND_EXECUTION]: The skill contains a bash script (scripts/fetch-niaid-samples.sh) designed to automate the retrieval and processing of reference materials from the NIH website.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 09:04 AM