evaluating-paper-relevance
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves research papers and supplementary files from standard scholarly domains such as
doi.orgusingcurlcommands. - [COMMAND_EXECUTION]: Utilizes shell utilities including
curlfor fetching remote assets andgrepfor searching through XML/text content of scientific articles. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface as it ingests and processes untrusted data from academic abstracts and full-text documents.
- Ingestion points: External data enters the context through
rp_search,rp_abstracts, andrp_fulltexttool outputs. - Boundary markers: The instructions do not define clear delimiters or markers to separate untrusted paper content from the agent's logic.
- Capability inventory: The agent has access to file-writing tools, network operations via
curl, and subprocess execution viagrep. - Sanitization: No evidence of data sanitization or filtering of the retrieved research text before analysis.
- [DYNAMIC_EXECUTION]: Recommends the "Progressive Enhancement Pattern" where the agent writes and executes its own Python scripts (e.g.,
screen_papers.py) to manage batch processing of literature.
Audit Metadata