scientific-writing
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
bashtool to execute local Python scripts for figure and schematic generation. - Evidence:
SKILL.mdcontains commands such aspython scripts/generate_schematic.pyandpython scripts/generate_image.py. - [COMMAND_EXECUTION]: The skill requires the agent to compile LaTeX documents using system tools.
- Evidence:
SKILL.mddirects the agent to executexelatex report.texto produce the final document. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest, process, and summarize external literature and research data.
- Ingestion points: The skill explicitly relies on the
research-lookuptool to fetch external literature content as specified inSKILL.md. - Boundary markers: The instructions do not define delimiters or specific "ignore embedded instructions" warnings for the ingested data.
- Capability inventory: The skill has access to
bash,Read,Write, andEdittools, allowing it to execute local scripts and modify files based on processed input. - Sanitization: No evidence of input validation or sanitization for the research data is provided in the skill documentation.
Audit Metadata