polars-dovmed
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to communicate with an external service at
https://api.newlineages.comto perform literature searches and fetch paper details. \n- [PROMPT_INJECTION]: The skill handles untrusted external data from PubMed Central, creating a surface for indirect prompt injection where malicious content in a paper could attempt to manipulate the agent's output. \n - Ingestion points: Data is fetched from the
/api/search_literatureand/api/get_paper_detailsendpoints as described inSKILL.md. \n - Boundary markers: The instructions do not specify any delimiters or safety markers to isolate the retrieved text from the agent's instructions. \n
- Capability inventory: The skill uses the
httpxlibrary for network access and is instructed to summarize and extract information from the results. \n - Sanitization: There is no evidence of sanitization or filtering of the retrieved paper content before it is processed by the agent.
Audit Metadata