food-review
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts, such as
scripts/fetch_oa.pyandscripts/privacy_scan.py, and system utilities like Pandoc to automate research grounding and report formatting. - [EXTERNAL_DOWNLOADS]: The
knowledge_builderagent fetches full-text academic papers from open-access repositories and institutional libraries to verify the accuracy of the manuscript's citations and provide a state-of-the-art context. - [PROMPT_INJECTION]: The skill processes user-supplied manuscripts, which presents an inherent surface for indirect prompt injection (Category 8). The risk is mitigated by the following evidence chain: (1) Ingestion point: Manuscript files provided in Word or Markdown format. (2) Boundary markers: Specialized reviewer instructions that compartmentalize analysis (e.g., separate methodology, domain, and integrity checks). (3) Capability inventory: Access to local file tools and scholarly search APIs via specialized sub-skills. (4) Sanitization: A dedicated privacy scan is performed on the final report to prevent leakage of local file paths or secrets.
Audit Metadata