critique-manuscript
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (user-provided LaTeX manuscripts) and incorporates this content into its evaluation process. This creates an indirect prompt injection surface where a manuscript could theoretically contain instructions designed to influence the agent's critique. However, the risk is minimal given the skill's purpose and lack of high-privilege capabilities.
- Ingestion points: The skill reads manuscript content from local
.texfiles during Phase 2 and 3. - Boundary markers: Absent; there are no explicit delimiters or instructions to ignore embedded commands within the manuscript files.
- Capability inventory: The skill generates a markdown report (
YYYY-MM-DD-critique-report.md) and can execute literature searches via the/openalextool. - Sanitization: No evidence of sanitization or filtering of the manuscript content before processing.
Audit Metadata