researchwrite

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Includes a Python script scripts/build_proposal_docx.py used to convert Markdown research drafts into formatted DOCX files. The script uses standard file I/O operations and follows a provided academic formatting standard.
  • [EXTERNAL_DOWNLOADS]: The document conversion script depends on the standard python-docx library, which is a well-known third-party package for Microsoft Word file manipulation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external research materials and existing drafts. It implements a 'proposal-first' architecture that uses 'section contracts' and 'evidence tables' to restrict the AI to authorized claims and grounded facts, providing significant structural guardrails against instructions embedded in untrusted data.
  • [SAFE]: The skill demonstrates security-conscious design by requiring explicit user approval before writing to external archives and emphasizing the use of local workspace paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:37 AM