scientific-critical-thinking
Warn
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool to executepython scripts/generate_schematic.py. This script is not included in the provided 7 files, making its logic and safety unverifiable during analysis.- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing untrusted scientific claims and research papers and then using natural language descriptions from those sources as arguments for a shell command. Mandatory Evidence: 1) Ingestion points: Reads external scientific claims and research papers via user input or file reads in SKILL.md; 2) Boundary markers: No delimiters or instructions to ignore embedded commands are present when processing external text; 3) Capability inventory: The skill has access toBash,Write,Edit, andReadtools; 4) Sanitization: There is no evidence of sanitization or escaping of the input text before it is passed to thegenerate_schematic.pyscript as a command-line argument.
Audit Metadata