aws-wechat-article-topics
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a Python script
article_init.pylocated in a relative path within the vendor's repository suite (../aws-wechat-article-publish/scripts/). This is used for local file initialization and does not appear to involve remote code execution. - [INDIRECT_PROMPT_INJECTION]: The skill actively uses
web_searchandweb_fetchto gather data from external sources to support research and content generation. This creates an attack surface where malicious instructions embedded in web content could influence the agent's behavior. - Ingestion points: External content fetched via
web_searchandweb_fetch(referenced inSKILL.mdandreferences/research-strategy.md). - Boundary markers: None identified in the prompt instructions to delimit untrusted data or prevent the agent from following embedded commands.
- Capability inventory: The agent has the ability to write to the local file system (
topic-card.md,article.yaml, etc.) and execute local Python scripts. - Sanitization: There are no documented procedures for sanitizing or filtering the content retrieved from external URLs before it is processed by the LLM.
Audit Metadata