would-agents-actually
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of local Python validation scripts, specifically
scripts/validate_verdict.py, to ensure that research artifacts conform to the required evidence and structure standards. - [EXTERNAL_DOWNLOADS]: An example workflow in
examples/verdict-insufficient-evidence.mddemonstrates fetching publication metadata from Arxiv (arxiv.org), a well-known and trusted academic repository, to support evidence collection. - [DYNAMIC_EXECUTION]: The internal test suite in
scripts/tests/test_validate_verdict.pyutilizessubprocess.runto programmatically execute and verify the skill's own validation logic. - [INDIRECT_PROMPT_INJECTION]: The skill includes specific security instructions in
references/recent-public-signal.mdto mitigate indirect prompt injection risks, explicitly directing the agent to treat all external signals as untrusted third-party data and to ignore any instructions embedded within them.
Audit Metadata