journal-adapt
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied academic papers and manuscripts. While this presents an attack surface for indirect prompt injection, the risk is mitigated by explicit 'HARD RULES' that restrict the agent to rhetorical analysis and prevent the reproduction or execution of content from the source files.
- [COMMAND_EXECUTION]: The skill employs the
minerutool via apython3subprocess to perform PDF-to-Markdown conversion. This is a functional requirement and is performed only on user-specified local files. - [EXTERNAL_DOWNLOADS]: The skill mentions external GitHub repositories for optional writing rules but requires the user to provide local paths, preventing unauthorized network downloads.
Audit Metadata