literature-review
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize external data from research papers and user-provided corpora.
- Ingestion points: External research papers, search results, and provided corpus (Step 1 and Step 2).
- Boundary markers: The instructions lack specific delimiters or instructions to ignore potential commands embedded within the source materials when interpolating their claims into the synthesis (Step 5).
- Capability inventory: The skill is restricted to text generation and synthesis. No high-risk capabilities such as network exfiltration, arbitrary command execution, or sensitive file system access were detected in the instructions.
- Sanitization: Step 7 includes a verification step to ensure citations are real and traceable, which provides a manual check against fabrication but does not specifically sanitize the content against instruction-based attacks embedded in the literature.
Audit Metadata