paperbd-study-paper
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
paperbdpackage via the npm registry. This is the official CLI tool provided by the vendor 'PaperBreakdown' for their research analysis service. - [COMMAND_EXECUTION]: The instructions direct the agent to guide the user through executing shell commands, including
paperbd statusfor session verification andpaperbd askfor retrieving paper data. These operations are standard for the skill's intended purpose. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external data from research papers via the
paperbd asktool. This creates a surface for indirect prompt injection as third-party PDF content is added to the agent's context. - Ingestion points: Output of
paperbd ask(SKILL.md). - Boundary markers: None explicitly defined for paper content.
- Capability inventory: Terminal command execution (
paperbdCLI). - Sanitization: Not explicitly implemented within the provided instructions.
Audit Metadata