sciverse
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
sciverse-mcp-serverpackage from the NPM registry. This package acts as the bridge between the agent and the Sciverse API, facilitating all paper retrieval tasks. - [COMMAND_EXECUTION]: The setup instructions include commands for
npm installand the use ofnpxwithin a configuration file to execute thesciverse-mcp-server. These commands are standard for initializing and running the required MCP server environment. - [INDIRECT_PROMPT_INJECTION]: The skill operates by retrieving and processing text from external academic papers through tools like
semantic_searchandread_content. This ingestion of third-party data represents a standard attack surface for indirect prompt injection, where malicious instructions could be embedded in the scientific literature. - Ingestion points: External text is brought into the agent's context via the
read_contentandsemantic_searchtools described inSKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or "ignore" instructions for the retrieved content.
- Capability inventory: The skill includes tools for searching metadata, semantic retrieval, reading content byte-ranges, and fetching images.
- Sanitization: There is no mention of sanitization or filtering of the retrieved academic text before it is presented to the agent.
Audit Metadata