textbook-grounding
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's architecture defined in
SKILL.md(Phase Φ2) describes the execution of several CLI tools, includingpdf-search,pdf-brain,docling, andperplexity. These tools are integrated to perform semantic searches across PDF textbooks and convert documents into extractable sections for medical exam preparation. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
perplexitysearch tool to fetch latest research and current practice information from the web as part of its 'secondary enrichment' phase. This involves network requests to external servers to retrieve academic and clinical data. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface through the ingestion of untrusted data from external sources, specifically PDF textbooks (processed via
doclingandpdf-search) and web content (viaperplexity). - Ingestion points: External PDF files and web search results.
- Boundary markers: The skill uses a 'symbol lexicon' and strict citation formatting rules in
references/citation-formats.mdto structure outputs. - Capability inventory: The skill uses CLI tools for search, PDF conversion (
docling), and a Python script for response validation. - Sanitization: The skill implements a 'Multi-Lens Critique' (Phase Φ6) and a systematic synthesis protocol (
references/synthesis-protocol.md) that uses authority, recency, and consensus checks to validate and filter ingested data before it is presented to the user.
Audit Metadata