research-grants
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing and providing feedback on user-supplied research grant components, such as Specific Aims pages and Project Summaries. This creates a potential surface for indirect prompt injection if the user-provided data contains instructions intended to override agent behavior.
- Ingestion points: External text from research proposals is provided by the user to the agent for review and editing (e.g., 'Review my NIH Specific Aims page').
- Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing user-provided grant text.
- Capability inventory: The skill employs the
Read,Write,Edit, andBashtools to assist with document management and project tracking. - Sanitization: There are no explicit measures described to sanitize or filter user-provided content before processing.
Audit Metadata