patent-panorama-insights-stats
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes patent data from external CSV and JSON files.
- Ingestion points: The skill reads input from
candidate_pool.csv,core_recall.csv, andsearch_config.jsoninSKILL.md. - Boundary markers: No specific delimiters or 'ignore embedded instructions' warnings are mentioned for the processing of patent titles or abstracts.
- Capability inventory: The skill utilizes various MCP tools (
/59100a,/1458a4,/3fd502) to fetch and enrich data and has the capability to write multiple output files, including a complex HTML report. - Sanitization: The instructions do not explicitly describe sanitization or escaping of patent text before it is interpolated into the final HTML dashboard.
- [DYNAMIC_EXECUTION]: The skill generates a self-contained HTML report (
panorama_stats_report.html) that includes inline CSS and JavaScript. - The report is populated with data aggregated from the search results, which is a form of dynamic content generation.
- The skill instructions explicitly require the JavaScript to be inline and degradable, avoiding external CDN or D3 dependencies to ensure the report remains offline-compatible and secure.
Audit Metadata