bioresearcher-deep-research
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text from biomedical repositories such as PubMed and ClinicalTrials.gov. It implements strong mitigation strategies by instructing the agent to treat this text strictly as reference data and never execute instructions found within research literature.
- Ingestion points: Results from research tools (e.g., article_search, trial_get) used during research aspects in Step 4.
- Boundary markers: Present in
SKILL.mdunder the 'Data boundaries & injection defense' section. - Capability inventory: Access to
Bash,Write, andTasktools for orchestration and reporting. - Sanitization: Mandates the use of structured evidence ledgers and semantic cite-key markers to isolate data from narrative findings.
- [EXTERNAL_DOWNLOADS]: The skill's citation verification scripts (
ncbi_esummary.py) fetch article metadata from the National Center for Biotechnology Information (NCBI) official E-utilities API. This is a well-known scientific service used legitimately to ensure report accuracy. - [COMMAND_EXECUTION]: The skill executes local Python scripts (
evidence-ledger.py,vet-references.py,markdown-to-html.py) to validate data, manage citation indexing, and render reports. It also utilizes standard utilities likenpxto run its core server anduvfor ephemeral environment management, both interacting with official package registries.
Audit Metadata