figure-pipeline

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches bibliographic metadata and figure captions from the National Center for Biotechnology Information (NCBI) PubMed e-utilities API.
  • [EXTERNAL_DOWNLOADS]: Retrieves research publication details from the official bioRxiv API.
  • [EXTERNAL_DOWNLOADS]: Accesses figure search results via the Europe PMC REST API hosted by EMBL-EBI.
  • [COMMAND_EXECUTION]: Uses curl and bash to perform network requests for fetching scientific data.
  • [COMMAND_EXECUTION]: Instructs the agent to generate and run Python (matplotlib) or R (ggplot2) code to create and save figure files.
  • [PROMPT_INJECTION]: Ingests untrusted bibliographic metadata from external scientific APIs, creating a surface for indirect prompt injection.
  • Ingestion points: Step 1 curl outputs from PubMed, bioRxiv, and Europe PMC.
  • Boundary markers: Employs plain text delimiters (e.g., === PubMed figure captions ===) to separate external data.
  • Capability inventory: Performs shell command execution (bash, curl) and file-system writes (plt.savefig, ggsave).
  • Sanitization: No explicit validation or escaping is applied to the retrieved metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 08:26 AM