document-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: All reviewed files contain benign documentation, installation guides, and standard Python/bash snippets for processing research papers and managing Zotero plugins. There are no signs of credential exposure, malicious remote code execution, or prompt injections.
- [INDIRECT_PROMPT_INJECTION]: The skill describes pipelines and workflows for extracting text from external academic documents, PDFs, and web URLs. This outlines a data ingestion surface where processing untrusted text documents could potentially introduce adversarial content into an active LLM session if boundaries are not strictly managed.
Audit Metadata