paperbd-study-paper

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the paperbd package via the npm registry. This is the official CLI tool provided by the vendor 'PaperBreakdown' for their research analysis service.
  • [COMMAND_EXECUTION]: The instructions direct the agent to guide the user through executing shell commands, including paperbd status for session verification and paperbd ask for retrieving paper data. These operations are standard for the skill's intended purpose.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of external data from research papers via the paperbd ask tool. This creates a surface for indirect prompt injection as third-party PDF content is added to the agent's context.
  • Ingestion points: Output of paperbd ask (SKILL.md).
  • Boundary markers: None explicitly defined for paper content.
  • Capability inventory: Terminal command execution (paperbd CLI).
  • Sanitization: Not explicitly implemented within the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 12:39 AM