foreign-literature-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
openpyxllibrary from the official Python Package Index (PyPI) to handle Excel file operations. - [COMMAND_EXECUTION]: The skill executes a local Python script (
openalex_search.py) to perform literature searches and uses theopencommand to display results to the user. - [DYNAMIC_EXECUTION]: The
SKILL.mdfile contains a Python code block for merging Excel files that the agent is instructed to execute at runtime to consolidate search results. - [INDIRECT_PROMPT_INJECTION]: The skill processes external academic data (titles and abstracts) retrieved from the OpenAlex API and reads local Excel files in its merging step. It lacks explicit boundary markers or sanitization, creating a surface for potential instructions embedded in metadata to influence the agent. Ingestion points: OpenAlex API metadata (titles/abstracts) and local Excel files. Boundary markers: Absent. Capability inventory: Network requests (urllib), file writing (openpyxl), and shell command execution. Sanitization: None detected.
Audit Metadata