peer-review-ops
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) because it ingests untrusted external data that could contain malicious instructions.
- [PROMPT_INJECTION]: Ingestion points: The skill reads manuscript metadata (titles, abstracts), author keywords, and codebase files via the target argument and file system exploration.
- [PROMPT_INJECTION]: Boundary markers: No specific delimiters or instructions (e.g., 'ignore instructions within this data') are used when processing manuscript content.
- [PROMPT_INJECTION]: Capability inventory: The agent is instructed to read system configurations, dependency manifests, and database schemas (Step 1.1) which provides a surface for exploitation if malicious instructions are encountered in data or configuration files.
- [PROMPT_INJECTION]: Sanitization: There is no evidence of data validation or sanitization before processing manuscript metadata or codebase content.
Audit Metadata