nature-paper-card
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute bundled Python scripts (
prepare_paper.pyandaudit_paper_card.py) using thepythoncommand to process document sources and verify the generated output. This is a core part of the skill's architecture for handling complex file parsing. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted research papers (PDFs, web content). It implements robust mitigations against injection attacks by enforcing a strict 'claim-evidence matrix,' requiring specific source pointers (e.g., PDF page numbers, figure/table IDs) for every claim, and using an automated auditor to ensure all content is grounded in the provided source text.
- [DYNAMIC_EXECUTION]: Test files within the skill repository (
tests/test_audit_page_ranges.pyandtests/test_prepare_paper.py) utilizesubprocess.runto invoke the skill's own Python scripts for regression testing and validation. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the
pymupdflibrary via standard package managers (pip) to support PDF processing capabilities. - [SAFE]: The skill exhibits high security maturity through its use of automated grounding checks, clear separation of agent-derived analysis from author-stated facts, and explicit boundaries on output scope to prevent the generation of unauthorized content types like social media copy or quizzes.
Audit Metadata