classify-technical-evidence-ip
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided patent and literature records in CSV and XLSX formats, which creates a surface for indirect prompt injection. The risk is mitigated by explicit process separation and mandatory authorization requirements before external tool use. Ingestion points:
Source Datasheets and CSV files processed inSKILL.md(Step 2) andscripts/inspect_labeling_input.mjs. Boundary markers: Instructions mandate separating extraction, judgment, and evidence, and require explicit confirmed gates. Capability inventory: Workbook generation viascripts/create_labeling_workbook.mjsand external technical retrieval via Patsnap MCP tools. Sanitization: Implements mandatory authorization gates and payload minimization logic as detailed inreferences/zhihuiya-mcp-orchestration.md.- [EXTERNAL_DOWNLOADS]: The skill documentation and orchestration guides reference Patsnap MCP services for technical evidence enrichment. Evidence: References to official Patsnap domains such asopen.patsnap.cominREADME.mdandreferences/zhihuiya-mcp-orchestration.mdfor keyword expansion and patent mining.
Audit Metadata