physics-skills

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official NASA ADS API at api.adsabs.harvard.edu for literature searches. This is a trusted, well-known scientific service and the interaction follows standard API documentation patterns.
  • [CREDENTIALS_UNSAFE]: Authentication instructions for the NASA ADS API leverage the ADS_API_TOKEN environment variable and provide placeholders like YOUR_ADS_API_TOKEN for user input, demonstrating best practices for secret management.
  • [INDIRECT_PROMPT_INJECTION]: The astrophysics and particle physics components contain logic for reading external data files such as FITS and ROOT files. These functions focus on scientific data analysis and lack dangerous capabilities that could be exploited by malicious data contents.
  • [COMMAND_EXECUTION]: Provides standard command-line examples for specialized physics tools such as Quantum ESPRESSO (pw.x), which are used legitimately within the context of the computational physics domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:31 AM