paper-reading-problem-reality-check

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill uses standard instructional language to define a research workflow. No patterns designed to override agent safety guidelines, extract system prompts, or bypass ethical constraints were found.
  • [DATA_EXFILTRATION]: The skill's operations are confined to a repository-local workspace. It does not contain any network-facing commands (curl, wget) or references to external non-whitelisted domains for data transfer.
  • [REMOTE_CODE_EXECUTION]: There is no evidence of remote script downloading, execution, or the use of dynamic evaluation functions (eval, exec) on untrusted data.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or private secrets were detected. The skill uses variable placeholders for paths but does not attempt to access sensitive system directories like ~/.ssh or .env files.
  • [COMMAND_EXECUTION]: The skill's workflow is limited to reading and writing markdown artifacts; it does not invoke shell commands or sub-processes that could be used for malicious system interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 03:30 AM
Security Audit — agent-trust-hub — paper-reading-problem-reality-check