academic-pipeline

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill processes user-provided manuscripts and external reviewer feedback which presents a surface for indirect prompt injection.
  • Ingestion points: The integrity_verification_agent and pipeline_orchestrator_agent ingest and analyze external text from manuscripts and reviewer comments (text, PDF, DOCX).
  • Boundary markers: The skill does not define explicit delimiters or instructions to ignore commands embedded within the academic content being processed.
  • Capability inventory: The agent has the ability to perform web searches and execute local commands via document processing utilities.
  • Sanitization: There is no evidence of content filtering or sanitization before external data is analyzed or used in prompts.
  • [COMMAND_EXECUTION]: The skill relies on external command-line utilities for final document preparation and processing.
  • Evidence: SKILL.md and agents/pipeline_orchestrator_agent.md specify the use of pandoc and tectonic for converting Markdown to LaTeX and compiling final PDF documents.
  • [EXTERNAL_DOWNLOADS]: The agent performs automated web searches to verify the integrity and accuracy of citations against external academic sources.
  • Evidence: agents/integrity_verification_agent.md describes a protocol for using web searches to cross-reference citations and claims against well-known services such as Google Scholar, DOI registries, and academic publisher websites.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 05:31 PM