Semantic Scholar Lookup
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation process fetches and installs the
astaCLI tool directly from the author's official GitHub repository atgithub.com/allenai/asta-plugins.git. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface because it retrieves untrusted third-party data from the Semantic Scholar API.
- Ingestion points: Metadata, abstracts, and full-text snippets retrieved via
asta papers search,asta papers get, andasta papers snippet-search(found in SKILL.md). - Boundary markers: None identified; external content is interpolated directly into the agent's context.
- Capability inventory: The agent has access to the
Bashtool withasta papers *commands, which can be used to further query the API or process data withjq. - Sanitization: No evidence of sanitization or filtering of the retrieved paper content before it is processed by the agent.
Audit Metadata