drug-potential-assessment
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external scientific sources such as patents, academic papers, and clinical trial results, which represents a potential surface for indirect prompt injection if those sources were to contain adversarial instructions.
- Ingestion points: External data enters the context through multiple tools including
mcp_virtual-mcp-pharma-intelligence__ls_paper_search,mcp_virtual-mcp-pharma-intelligence__ls_patent_fetch, andmcp_virtual-mcp-pharma-intelligence__ls_clinical_trial_result_searchas defined inSKILL.md. - Boundary markers: The prompt instructions do not specify explicit delimiters or 'ignore' instructions to wrap external content.
- Capability inventory: The agent's capabilities are primarily restricted to information retrieval and reporting; the skill does not request or utilize tools for file system writing, arbitrary shell command execution, or non-whitelisted outbound network requests.
- Sanitization: No specific filtering or sanitization protocols for the retrieved textual data are described in the workflow.
- [SAFE]: The skill follows professional standards for pharmaceutical research, employing structured workflows and multi-dimensional scoring systems based on legitimate data sources. All referenced MCP tools are consistent with the vendor's (patsnap) stated domain expertise.
Audit Metadata