research-lookup
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect injection because user-provided strings for diagram descriptions and research queries are interpolated into shell commands. This creates an attack surface where a user or processed data could attempt to escape the command string.
- Ingestion points: User-provided text for scientific diagram descriptions and search queries in SKILL.md.
- Boundary markers: No explicit delimiters or boundary markers are shown in the shell command templates.
- Capability inventory: The skill uses the 'Bash' tool to execute local Python scripts for core functionality.
- Sanitization: The documentation lacks instructions or evidence of input validation or shell escaping for these parameters.
- [COMMAND_EXECUTION]: The skill requires the 'Bash' tool to execute local scripts (scripts/generate_schematic.py and research_lookup.py) to provide its research and visualization capabilities.
Audit Metadata