analyze-scientific-papers
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes scientific papers and metadata fetched from external scholarly databases (arXiv, Crossref, OpenAlex), which serves as an ingestion point for untrusted data.
- Ingestion points: External metadata is retrieved via
scripts/fetch_metadata.pyfrom public scholarly APIs. Full-text paper content is processed from files provided to the agent. - Boundary markers: The agent is directed to use a specific
Evidence notetemplate (assets/evidence-note-template.md) which enforces a structured analysis workflow (Claim, Source, Evidence, Conclusion), reducing the likelihood of the agent following instructions embedded within the paper text. - Capability inventory: The skill has capabilities for network access (metadata fetch) and local script execution (statistical validation and note checking).
- Sanitization:
scripts/check_stats.pyemploys strict regex parsing for APA-style reports.scripts/fetch_metadata.pyvalidates the envelope structure (Atom XML or JSON) before processing the content. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to retrieve metadata and software dependencies from well-known scholarly and technical services.
- Evidence:
scripts/fetch_metadata.pyconnects toexport.arxiv.org,api.crossref.org, andapi.openalex.orgto retrieve paper metadata. These are recognized, well-known scholarly services. - Evidence:
assets/examples/verify.shuses theuvtool to download and run thescipylibrary (scipy==1.16.2) from a standard package registry for cross-verification of statistical results. - [DYNAMIC_EXECUTION]: The skill utilizes script generation and runtime execution as part of its internal verification suite.
- Evidence: The
assets/examples/verify.shscript dynamically generates and executes a Python snippet usinguv runto compare the skill's custom math implementation against thescipylibrary to ensure accuracy.
Audit Metadata