figure-pipeline
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches bibliographic metadata and figure captions from the National Center for Biotechnology Information (NCBI) PubMed e-utilities API.
- [EXTERNAL_DOWNLOADS]: Retrieves research publication details from the official bioRxiv API.
- [EXTERNAL_DOWNLOADS]: Accesses figure search results via the Europe PMC REST API hosted by EMBL-EBI.
- [COMMAND_EXECUTION]: Uses
curlandbashto perform network requests for fetching scientific data. - [COMMAND_EXECUTION]: Instructs the agent to generate and run Python (matplotlib) or R (ggplot2) code to create and save figure files.
- [PROMPT_INJECTION]: Ingests untrusted bibliographic metadata from external scientific APIs, creating a surface for indirect prompt injection.
- Ingestion points: Step 1
curloutputs from PubMed, bioRxiv, and Europe PMC. - Boundary markers: Employs plain text delimiters (e.g.,
=== PubMed figure captions ===) to separate external data. - Capability inventory: Performs shell command execution (
bash,curl) and file-system writes (plt.savefig,ggsave). - Sanitization: No explicit validation or escaping is applied to the retrieved metadata.
Audit Metadata