medrxiv-search
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local bash and Node.js scripts for API interactions and configuration management. It recommends using a find command to locate these scripts within the environment's plugin cache.
- [DATA_EXFILTRATION]: The skill requires an external API key for api.valyu.ai and transmits user queries to this service. This is normal functionality for the search tool but involves handling sensitive credentials and external data flow.
- [PROMPT_INJECTION]: The skill fetches research paper content from an external API, presenting an indirect prompt injection surface. It lacks documented boundary markers or sanitization procedures for the ingested data, which could allow external content to influence the agent's context and logic. Capability inventory includes local script execution.
Audit Metadata