analyze-patent-family-ip
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted patent data retrieved from external sources.
- Ingestion points: External patent data is retrieved through
patent_briefing,advanced_patent_search, andglobal_core_patent_databaseMCP tools. - Boundary markers: The
SKILL.mdfile explicitly identifies all text from connectors as untrusted and requires escaping. - Capability inventory: The skill uses
scripts/analyze_family.pyto write HTML reports to the local file system. - Sanitization: The Python renderer implements high-quality sanitization, including
html.escapefor all untrusted text and protocol allow-listing (http,https) for URLs. - [COMMAND_EXECUTION]: The skill executes
scripts/analyze_family.pyat the end of its workflow. Analysis of the script confirms it uses only standard Python libraries, performs strict input validation, and does not spawn sub-processes or execute shell commands. - [EXTERNAL_DOWNLOADS]: The skill references official Patsnap Marketplace MCP servers. These are vendor-owned resources used for the skill's primary analytical purpose and do not represent a security risk.
Audit Metadata