sciverse
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
sciverse-mcp-serverpackage from the NPM registry and facilitates communication with thesciverse.spaceAPI. - [COMMAND_EXECUTION]: The skill's setup instructions involve shell commands for global package installation (
npm install -g) and executing the MCP server usingnpx. - [DATA_EXFILTRATION]: The skill uses an API token (
SCIVERSE_API_TOKEN) to authenticate requests to the service's official backend atsciverse.space. - [PROMPT_INJECTION]: The skill ingests external content from academic papers, which presents a surface for indirect prompt injection where instructions embedded in papers could attempt to influence the agent.
- Ingestion points: Abstracts and full-text fragments retrieved through the
semantic_searchandread_contenttools (SKILL.md). - Boundary markers: Absent. The instructions do not provide specific delimiters or ignore-instructions warnings for the retrieved academic data.
- Capability inventory: The agent can read content, perform searches, and process scientific data through its standard reasoning cycle.
- Sanitization: Absent. The skill relies on the inherent formatting of academic papers and does not specify content filtering.
Audit Metadata