book-research-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions, reference guidelines, and templates. No executable scripts, binaries, or automated shell commands were detected within the skill files.
- [CREDENTIALS_UNSAFE]: A review of all instructions and templates found no hardcoded API keys, tokens, or sensitive file paths (such as .ssh or .aws directories).
- [OBFUSCATION]: No hidden content, Base64 encoded payloads, zero-width characters, or homoglyph attacks were detected in the text or metadata.
- [COMMAND_EXECUTION]: The skill does not utilize tool invocation for system commands or shell execution. It also lacks any dynamic context injection (the !command pattern).
- [DATA_EXFILTRATION]: No network operations (such as curl, wget, or fetch) were found. The skill's design involves the user providing research content manually from external sources.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external research data. While this creates a theoretical ingestion surface, the risk is mitigated by the skill's focus on manual validation and source scrutiny. The skill lacks dangerous capabilities that could be triggered by adversarial data.
Audit Metadata