peer-review
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts using the
Bashtool to generate schematics and process presentation files. - Evidence:
python scripts/generate_schematic.py "your diagram description" -o figures/output.pnginSKILL.md. - Evidence:
python skills/scientific-slides/scripts/pdf_to_images.py presentation.pdf review/slide --dpi 150inSKILL.md. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes external, untrusted scientific documents (manuscripts and presentations) while having access to sensitive tools such as
Bash,Write, andEdit. - Ingestion points: Scientific manuscripts, grant proposals, and PDF slide decks provided by users for review.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded within the text of the manuscripts.
- Capability inventory: The skill uses
Read,Write,Edit, andBashtools, allowing it to perform file operations and execute shell commands. - Sanitization: The skill provides a specific security/stability mitigation by mandating that presentation PDFs be converted to images for visual review rather than being read as text, which reduces the risk of the agent following instructions embedded directly in the PDF content.
Audit Metadata