researchwrite
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Includes a Python script
scripts/build_proposal_docx.pyused to convert Markdown research drafts into formatted DOCX files. The script uses standard file I/O operations and follows a provided academic formatting standard. - [EXTERNAL_DOWNLOADS]: The document conversion script depends on the standard
python-docxlibrary, which is a well-known third-party package for Microsoft Word file manipulation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external research materials and existing drafts. It implements a 'proposal-first' architecture that uses 'section contracts' and 'evidence tables' to restrict the AI to authorized claims and grounded facts, providing significant structural guardrails against instructions embedded in untrusted data.
- [SAFE]: The skill demonstrates security-conscious design by requiring explicit user approval before writing to external archives and emphasizing the use of local workspace paths.
Audit Metadata