skills/agentscope-ai/qwenpaw/guidance/Gen Agent Trust Hub

guidance

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands such as find, which, awk, and sed to programmatically locate documentation directories based on the project's installation path.
  • [DYNAMIC_EXECUTION]: It executes a Python script snippet (python3 -c) to import the qwenpaw library and retrieve environment constants. This is an intentional use of the vendor's own package.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local Markdown documentation files to generate responses, creating a potential surface for indirect prompt injection. 1. Ingestion points: Documentation files found in DOCS_DIR or memory. 2. Boundary markers: None present. 3. Capability inventory: Local file access, shell command execution, and network access to vendor domains. 4. Sanitization: No explicit sanitization or validation of documentation content is performed.
  • [EXTERNAL_DOWNLOADS]: The skill references a fallback documentation URL at http://qwenpaw.agentscope.io/. This domain is associated with the skill's author and is used for official documentation access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 04:39 AM