reactivate-underused-patents-ip
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: All external communication is conducted via authenticated Model Context Protocol (MCP) connectors (such as
advanced_patent_searchandglobal_core_patent_database) hosted on the vendor's domain (open.patsnap.com). This represents legitimate, scoped functionality for patent intelligence. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for external patent and commercial data which could contain malicious formatting. The design includes strong mitigations such as mandatory output escaping and role separation to prevent external content from compromising the agent's execution environment.
- Ingestion points: Data is fetched from patent databases using the connectors defined in
references/mcp-boundaries.md. - Boundary markers: Instructions in
references/output-spec.mdrequire escaping all text and using safe external-link attributes. - Capability inventory: The skill is capable of generating HTML, PDF, DOCX, and XLSX reports based on processed data.
- Sanitization: Specifically mandated for all internal, user, and public-source text in the deliverable specification.
Audit Metadata