physics-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official NASA ADS API at
api.adsabs.harvard.edufor literature searches. This is a trusted, well-known scientific service and the interaction follows standard API documentation patterns. - [CREDENTIALS_UNSAFE]: Authentication instructions for the NASA ADS API leverage the
ADS_API_TOKENenvironment variable and provide placeholders likeYOUR_ADS_API_TOKENfor user input, demonstrating best practices for secret management. - [INDIRECT_PROMPT_INJECTION]: The astrophysics and particle physics components contain logic for reading external data files such as FITS and ROOT files. These functions focus on scientific data analysis and lack dangerous capabilities that could be exploited by malicious data contents.
- [COMMAND_EXECUTION]: Provides standard command-line examples for specialized physics tools such as Quantum ESPRESSO (
pw.x), which are used legitimately within the context of the computational physics domain.
Audit Metadata