patent-research-analyst
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines operational constraints to ensure the agent collects specific technical data for patent research. It does not contain instructions to ignore safety guardrails or override system instructions.
- [DATA_EXFILTRATION]: The skill retrieves data using the Patsnap Model Context Protocol (MCP) tools and provides links to the official Eureka platform (eureka.zhihuiya.com). No unauthorized data transfer or hardcoded credentials were found.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: User-provided technical problems and solutions collected in Step 1 (SKILL.md). Boundary markers: The process includes a mandatory "Information Confirmation Card" requiring user verification before proceeding. Capability inventory: Utilizes tool calls for patent searching and library-based report generation. Sanitization: Relies on manual user verification of input fields to prevent automated injection.
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard library functionality (python-docx) for Word document generation. It does not perform dynamic package installations or download scripts from unverified sources.
- [SAFE]: The skill behavior is consistent with its stated purpose as a patent research tool, using legitimate vendor infrastructure and following safe data handling practices.
Audit Metadata