ecommerce-patent-core-bibliography
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to an external API to retrieve patent bibliographic data.
- Evidence: The Python script
scripts/patent_core_bibliography.pyusesurllib.request.urlopento communicate with the API endpoint specified by the${NEXSCOPE_PROXY_BASE}environment variable. - Data Handling: Authentication is managed securely through the
NEXSCOPE_API_KEYenvironment variable rather than hardcoded secrets. - [COMMAND_EXECUTION]: The skill executes a Python script to handle parameter processing and API interaction.
- Evidence:
SKILL.mddocuments the invocation ofpython scripts/patent_core_bibliography.py '<JSON params>' [--inline]. - [INDIRECT_PROMPT_INJECTION]: The skill represents an ingestion surface for untrusted data retrieved from external patent abstracts and titles.
- Ingestion points: Patent metadata including
abstractContent,title, andinventorsare processed from the API response inscripts/patent_core_bibliography.py. - Boundary markers: The instructions do not explicitly define delimiters to isolate the retrieved patent content from the agent's internal reasoning.
- Capability inventory: The skill has network access capabilities and the ability to write JSON files to the local project filesystem (
<cwd>/nexscope/). - Sanitization: No explicit sanitization or filtering of retrieved bibliographic text for potential prompt injection payloads is implemented.
Audit Metadata