top-journals-methods-scout
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of academic paper abstracts and metadata from the external OpenAlex API, which is then summarized by the agent. This represents an attack surface where external content enters the agent's context.
- Ingestion points: Metadata is fetched via the OpenAlex API and stored in
/tmp/methods_scout/papers.jsonbefore being read by the agent. - Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions when processing abstract text.
- Capability inventory: The skill has the capability to execute shell commands, run Python scripts, and write files to the
/tmp/directory. - Sanitization: Content is processed through heuristic regex-based classification, but no specific sanitization of the natural language text is performed before it is used for report generation.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to the OpenAlex API (
api.openalex.org) to retrieve scholarly metadata. OpenAlex is a well-known and standard service for academic research metrics and data. - [COMMAND_EXECUTION]: The skill utilizes local Python scripts and a heredoc-based Python snippet for data manipulation and statistical sorting. These commands are integral to the tool's primary function of processing and summarizing the collected academic data.
Audit Metadata