qinyan-paper-search
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to
api.qinyanai.comto retrieve search results from academic databases including Google Scholar, Wanfang, PubMed, and ArXiv. - [COMMAND_EXECUTION]: The skill utilizes a local shell script,
scripts/search.sh, to executecurlcommands. The script includes a validation step usingpython3to ensure that user-provided search parameters are in a valid JSON format before transmission. - [PROMPT_INJECTION]: The skill has a data ingestion surface for user-provided queries.
- Ingestion points: User-supplied search queries are passed as the
queryfield in JSON payloads withinSKILL.mdandscripts/search.sh. - Boundary markers: No explicit boundary markers or instruction-ignore delimiters are present in the prompt instructions.
- Capability inventory: The skill is capable of performing network requests via
curlto the vendor's API endpoint. - Sanitization: The
scripts/search.shscript validates the structure of the JSON payload usingpython3 -c, though it does not perform semantic sanitization of the query content itself.
Audit Metadata