mingjingzhishui
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run local diagnostic and simulation scripts provided within the user's own project environment to verify system state.
- Evidence:
repo-runtime.mdandeval-cases.mdmention the execution ofpython3 ~/oneos-prod/scripts/repo-sim-multi-ms.pyandscripts/prod-ro-probe.shfor environment simulation. - [EXTERNAL_DOWNLOADS]: The skill includes installation instructions that fetch the skill content from the author's public repository.
- Evidence:
INSTALL.mdprovides annpx skills addcommand targeting the repository15810879921-coder/oneos-pm-skills. - [PROMPT_INJECTION]: The skill defines a robust handling process for its input 'handoff packages' to mitigate indirect injection risks through structural enforcement.
- Ingestion points: The agent processes external instructions via a specific markdown schema defined in
handoff-from-pm.md. - Boundary markers: The skill employs 'Hard Gates,' which involve rejecting any input that does not conform to the mandatory schema or contains ambiguous instructions.
- Capability inventory: The agent has permissions to modify local files in prototype and production directories and execute project-specific scripts.
- Sanitization: The instructions strictly prohibit 'brain-filling' or autonomous decision-making, requiring the agent to stop and ask the user for clarification if the input package is incomplete.
Audit Metadata