academic-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content such as manuscripts and reviewer comments. It mitigates this risk through explicit boundary markers and instructions to the AI to treat such content as data rather than instructions.
- [COMMAND_EXECUTION]: The skill executes local Python and Shell scripts to automate state tracking, data validation, and handoff between stages. These scripts are internal to the skill and serve legitimate orchestration purposes.
- [DATA_EXFILTRATION]: The skill interacts with academic indices and optionally sends data to external model providers for auditing and verification. These interactions are transparently documented and include opt-in user consent requirements.
Audit Metadata