bgpt-paper-search
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs users to run commands like
npx mcp-remoteandnpx bgpt-mcp. These commands download and execute packages from the npm registry to establish a connection to the MCP server. - [EXTERNAL_DOWNLOADS]: The skill facilitates connection to a remote SSE (Server-Sent Events) endpoint at
https://bgpt.pro/mcp/sse. This is the legitimate service URL for the BGPT paper search functionality described in the skill. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it retrieves and processes scientific paper data from an external database.
- Ingestion points: Search results from the
search_paperstool (SKILL.md). - Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: The skill environment allows the use of the
Bashtool (SKILL.md). - Sanitization: No specific sanitization or filtering logic is mentioned for the retrieved paper content.
Audit Metadata