guidance
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands such as
find,which,awk, andsedto programmatically locate documentation directories based on the project's installation path. - [DYNAMIC_EXECUTION]: It executes a Python script snippet (
python3 -c) to import theqwenpawlibrary and retrieve environment constants. This is an intentional use of the vendor's own package. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local Markdown documentation files to generate responses, creating a potential surface for indirect prompt injection. 1. Ingestion points: Documentation files found in
DOCS_DIRor memory. 2. Boundary markers: None present. 3. Capability inventory: Local file access, shell command execution, and network access to vendor domains. 4. Sanitization: No explicit sanitization or validation of documentation content is performed. - [EXTERNAL_DOWNLOADS]: The skill references a fallback documentation URL at
http://qwenpaw.agentscope.io/. This domain is associated with the skill's author and is used for official documentation access.
Audit Metadata