patent-panorama-insights
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes patent data (titles, abstracts, and claims) retrieved via MCP tools and user-supplied CSV files (tagged_pool.csv). While this constitutes an indirect prompt injection surface, the risk is mitigated by the highly structured workflow, mandatory human-in-the-loop validation (Handoff 3.5), and explicit instructions to categorize outputs as analytical signals rather than verified facts.
- [COMMAND_EXECUTION]: The skill references sub-skills and specific Patsnap tool namespaces (e.g., 59100a, 1458a4). These are internal tool invocations scoped to the agent environment's permitted MCP capabilities rather than arbitrary shell command execution.
- [DATA_EXFILTRATION]: The skill manages patent analysis project files locally. It explicitly directs that authentication credentials (Bearer tokens) must be configured within the host platform's secret management system rather than being stored within the skill's instructions or scripts.
Audit Metadata