academic-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided manuscripts and external reviewer feedback which presents a surface for indirect prompt injection.
- Ingestion points: The
integrity_verification_agentandpipeline_orchestrator_agentingest and analyze external text from manuscripts and reviewer comments (text, PDF, DOCX). - Boundary markers: The skill does not define explicit delimiters or instructions to ignore commands embedded within the academic content being processed.
- Capability inventory: The agent has the ability to perform web searches and execute local commands via document processing utilities.
- Sanitization: There is no evidence of content filtering or sanitization before external data is analyzed or used in prompts.
- [COMMAND_EXECUTION]: The skill relies on external command-line utilities for final document preparation and processing.
- Evidence:
SKILL.mdandagents/pipeline_orchestrator_agent.mdspecify the use ofpandocandtectonicfor converting Markdown to LaTeX and compiling final PDF documents. - [EXTERNAL_DOWNLOADS]: The agent performs automated web searches to verify the integrity and accuracy of citations against external academic sources.
- Evidence:
agents/integrity_verification_agent.mddescribes a protocol for using web searches to cross-reference citations and claims against well-known services such as Google Scholar, DOI registries, and academic publisher websites.
Audit Metadata