scholar-evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's instructions in
SKILL.mddirect the agent to execute local Python scripts, specificallyscripts/calculate_scores.pyandscripts/generate_schematic.py, using theBashtool to perform score aggregation and generate publication-quality diagrams.- [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection due to its document processing nature. - Ingestion points: The skill is designed to ingest and analyze untrusted external scholarly work (research papers, proposals, literature reviews) during the evaluation workflow described in
SKILL.md. - Boundary markers: The instructions do not define explicit delimiters or boundary markers to isolate untrusted content when it is interpolated into the agent's context.
- Capability inventory: The skill has access to the
Bash(command execution) andWrite(file system modification) tools, as specified in the frontmatter ofSKILL.md. - Sanitization: There are no documented procedures for sanitizing or filtering potential malicious instructions embedded within the scholarly documents being evaluated.
Audit Metadata