scientific-writing
Fail
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to construct and execute shell commands via the Bash tool. In
SKILL.md, the agent is instructed to runpython scripts/generate_schematic.pyandpython scripts/generate_image.pyusing natural language descriptions as command-line arguments. - [PROMPT_INJECTION]: The skill exhibits a significant Indirect Prompt Injection surface. It is designed to ingest and process untrusted data from external sources using the
research-lookuptool. * Ingestion points: Data entering through the research literature search workflow described inSKILL.md. * Boundary markers: Absent. There are no instructions to delimit fetched data or ignore potential instructions embedded within the research material. * Capability inventory: The skill has access toBash,Write,Read, andEdittools, and is explicitly instructed to use them to generate files and run scripts. * Sanitization: Absent. The skill instructs the agent to interpolate user-influenced or data-influenced descriptions directly into shell commands without escaping or validation. - [EXTERNAL_DOWNLOADS]: The skill references and mandates the use of external Python scripts (
scripts/generate_schematic.pyandscripts/generate_image.py) and several other unverified skills (scientific-schematics,generate-image,research-lookup) that are not included in the provided file set.
Recommendations
- AI detected serious security threats
Audit Metadata