Ancient Near East Research
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches data from external academic sources, primary source databases (Sefaria, CDLI, ORACC), and web discovery tools (JSTOR, Google Scholar). This content is processed and presented to the agent, creating a surface where third-party content could theoretically contain instructions intended to influence the agent.
- Ingestion points:
scripts/fetch_sefaria.py,scripts/fetch_cuneiform.py, andscripts/ane_stealth_fetch.sh(via theobscurabrowser tool). - Boundary markers: No explicit boundary markers are added by the scripts when formatting retrieved content.
- Capability inventory: The skill uses
urllib.requestfor API calls, themistralaiPython package for OCR, and calls the externalobscurabinary for web scraping. - Sanitization: The scraping script
ane_stealth_fetch.shtruncates extracted text to specific character limits (e.g., 2000-3000 characters). - [DYNAMIC_EXECUTION]: The shell script
scripts/ane_stealth_fetch.shutilizes the--evalfunctionality of theobscurabrowser tool to execute hardcoded Javascript snippets for data extraction from various academic websites. This is a functional requirement for its scraping capabilities and is limited to specific, pre-defined DOM manipulation logic.
Audit Metadata