paper-spine
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to fetch updates and verify academic metadata. \n
scripts/paperspine_update.pydownloads version manifests and skill archives from the author's GitHub repository (github.com/WUBING2023/PaperSpine) to perform self-updates. \nscripts/citation_quality_audit.pyandscripts/citation_verification_en.pyconnect to Crossref (api.crossref.org) and Semantic Scholar (api.semanticscholar.org) to resolve academic identifiers. \n- [COMMAND_EXECUTION]: Local shell commands are used for environment setup and workflow orchestration. \nscripts/launch_paperspine_ui.ps1executes PowerShell with-ExecutionPolicy Bypassto launch the interactive configuration wizard. \nscripts/progress_check.pyexecutes sibling Python scripts (such asartifact_check.pyandintegrity_audit.py) viasubprocess.runto validate workflow stages. \n- The skill instructions require the use of system tools like
pandocand LaTeX compilers (pdflatex,xelatex) for document generation. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user documents, creating a potential attack surface for indirect prompt injection. \n - Ingestion points: Manuscript drafts and research materials are ingested via
scripts/material_inventory.pyandscripts/reference_inventory.py. \n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used during data ingestion. \n
- Capability inventory: The skill possesses the ability to execute Python scripts via
subprocess.run(scripts/progress_check.py) and modify local configuration files (scripts/paperspine_update.py). \n - Sanitization: Content is validated for length and structure but not for malicious natural language instructions.
Audit Metadata