prior-art-search
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted technical data from external web sources.
- Ingestion points: Data is retrieved from external websites via
WebSearchandWebFetch, specifically from platforms like patents.google.com, espacenet.com, and academic repositories. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the retrieved content, leaving the agent potentially vulnerable to commands embedded in the fetched text.
- Capability inventory: The skill allows the agent to
Writeresults to the file system and provides access to broadBashtool permissions. - Sanitization: There is no evidence of filtering, escaping, or validating the external content before it is incorporated into the prompt.
- [EXTERNAL_DOWNLOADS]: The skill fetches research data and citations from well-known services such as Google Patents, Espacenet, Google Scholar, and arXiv. These references target established repositories and are necessary for the skill's primary research function.
Audit Metadata