scientific-writing
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform specific shell operations to generate schematics and compile LaTeX reports. Evidence includes the usage of
python scripts/generate_schematic.py,python scripts/generate_image.py, andxelatex report.texwithin the drafting and formatting instructions. - [INDIRECT_PROMPT_INJECTION]: The skill relies on the
research-lookuptool to ingest external literature, creating a vulnerability surface where instructions hidden in research papers could influence the agent's behavior. 1. Ingestion points: Data retrieved via theresearch-lookuptool (SKILL.md). 2. Boundary markers: None specified in the instructions to separate fetched data from the agent's core logic. 3. Capability inventory: Subprocess execution viaBash(python, xelatex), and file system modification viaWriteandEdit. 4. Sanitization: No specific sanitization or validation of the fetched external research data is described.
Audit Metadata