ai-chat
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the
@acedatacloud/ai-chatextension via theclawhubpackage manager. This is a vendor-specific resource intended to provide the documented chat capabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process external and potentially untrusted data—such as audio files, news summaries, and implementation plans—creating a surface for indirect prompt injection.\n - Ingestion points: Untrusted data enters the agent context through the
message,question, andreferencesparameters within the/aichat2/conversationsand Gemini native API endpoints documented inSKILL.md.\n - Boundary markers: The provided documentation and examples do not define specific delimiters or instructions to the model to ignore embedded commands within user-supplied content.\n
- Capability inventory: The skill utilizes network operations (via
curland theopenaiPython SDK) to communicate withapi.acedata.cloudand accesses local configuration files in~/.openclaw/.env.\n - Sanitization: No explicit content sanitization or validation logic is mentioned for the data forwarded to the LLM endpoints.
Audit Metadata