gap-to-topic
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a bundled Node.js script (
scripts/dossier_to_docx.js) to convert Markdown research dossiers into Word documents. This involves standard command-line invocation using Node.js to process local project files. - [EXTERNAL_DOWNLOADS]: The skill relies on the
docxnpm package, a well-known library for generating Word documents. Documentation and instructions are provided for installing this dependency through the standard npm registry. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external research databases via search tools.
- Ingestion points: Paper metadata, including titles, abstracts, and identifiers, are retrieved using the
research-hub searchtool and processed into thetopic_dossier.mdfile. - Boundary markers: The skill expects structured JSON output from its search tools, which helps delineate external content from agent instructions.
- Capability inventory: The agent has the ability to write and read files in the
.research/directory and execute the localdossier_to_docx.jsscript. - Sanitization: The skill implements "Honesty rules" requiring verbatim quote verification and the resolution of academic identifiers (DOIs/arXiv IDs) to ensure the integrity of the evidence presented in the dossier.
- [DYNAMIC_EXECUTION]: The workflow involves the execution of a provided Node.js script that uses the
fsandpathmodules to perform file transformations. The script's logic is transparent and limited to reading Markdown content and generating a formatted.docxfile.
Audit Metadata