patent-search-collect
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses environment variables (
KIPRIS_API_KEY) for API authentication, which is the recommended method for preventing hardcoded credential exposure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources during patent searches.
- Ingestion points: Patent descriptions, claims, and metadata retrieved from the KIPRIS API through tools like
patent_detail_searchandpatent_free_search(documented in SKILL.md). - Boundary markers: None explicitly provided to separate retrieved patent text from agent instructions.
- Capability inventory: The skill writes retrieved data to local Excel files via
output_pathparameters. - Sanitization: No specific sanitization or filtering of API responses is mentioned before file writing or analysis.
- [SAFE]: The workflow involves standard data processing tasks, such as batch exporting results and deduplicating records based on application numbers, which align with the skill's stated purpose.
Audit Metadata