tooluniverse-literature-deep-research
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content from scientific literature databases and web pages, which could contain instructions designed to influence the agent's behavior.
- Ingestion points: Untrusted data is ingested via tools such as
EuropePMC_search_articles,SemanticScholar_get_pdf_snippets,ArXiv_get_pdf_snippets, andget_webpage_text_from_urlas described inSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within the fetched data are defined in the workflow.
- Capability inventory: The skill has the capability to write research results to the local file system (e.g.,
[topic]_report.md,[topic]_factcheck_report.md, and[topic]_bibliography.json). - Sanitization: The instructions do not specify any sanitization or validation of the text extracted from PDFs or web pages before it is synthesized into the final report.
Audit Metadata