inno-paper-reviewer
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface detected. The skill is designed to ingest and evaluate untrusted scientific documents and presentations. * Ingestion points: Processes external manuscript files and PDF slides using the
read_filetool. * Boundary markers: Absent; no delimiters are defined to isolate untrusted content from the agent's instructions. * Capability inventory: The skill utilizeswrite_fileto create figures and executespythonscripts to perform image conversion and schematic generation. * Sanitization: Absent; no validation or sanitization of document content is specified before tool use. - [COMMAND_EXECUTION]: The skill provides explicit instructions to execute shell commands for workflow tasks. Evidence includes the usage of
python scripts/generate_schematic.pyto create diagrams andpython skills/scientific-slides/scripts/pdf_to_images.pyto convert PDF presentations for inspection. - [EXTERNAL_DOWNLOADS]: The skill contains references to external repositories and services. Evidence includes a reference to an upstream repository on GitHub (
dr-claw/skills/inno-paper-reviewer) and a recommendation to use thek-dense.aiweb platform for complex workflows.
Audit Metadata