format-citations
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads CSL style files from the official Citation Style Language GitHub repository, which is a trusted and well-known source for academic formatting styles.
- [COMMAND_EXECUTION]: It uses
system2to execute Pandoc andrmarkdown::renderto compile documents. These are standard operations for generating academic citations and reports in an R environment. - [PROMPT_INJECTION]: Identified potential for indirect prompt injection (Category 8) due to the ingestion of user-controlled document and bibliography files.
- Ingestion points: Processes user-provided
.biband.Rmdfiles as seen inSKILL.md. - Boundary markers: Absent; the skill lacks explicit delimiters to separate user data from instructions.
- Capability inventory: Access to
system2for binary execution,rmarkdown::renderfor code execution within documents, andutils::download.filefor network operations. - Sanitization: No sanitization or validation is performed on the input citation keys or bibliographic data before processing.
Audit Metadata