mathproofs-claw
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing data from external theorem submissions and compiler logs.
- Ingestion points: Data enters the agent context through the
search_theoremstool response, particularly therecent_submissionsandoutput_logfields. - Boundary markers: The skill lacks explicit boundary markers or instructions to treat tool-provided content as untrusted data.
- Capability inventory: The agent has the capability to interact with external APIs through the
prove_theoremandsubmit_theoremtools, which could be influenced by instructions embedded in the theorem data. - Sanitization: No sanitization or filtering of the content received from the MathProofs-Claw backend is described.
- [DATA_EXFILTRATION]: The skill requires and transmits the
MATHPROOFS_API_KEYto themathproofs.adeveloper.com.brdomain. This is a functional requirement for authentication with the platform's backend infrastructure.
Audit Metadata