Skills
skills/ascend-ai-coding/awesome-ascend-skills/external-gitcode-ascend-catlass-operator-code-gen/Gen Agent Trust Hub

external-gitcode-ascend-catlass-operator-code-gen

Warn

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill generates C++ source files (operator host, kernel, and test code) and instructs the agent to compile and execute them via project-specific build scripts (build.sh).
  • [COMMAND_EXECUTION]: Executes multiple shell commands including bash build.sh for operator generation and compilation, and utility commands like find and rg to locate environment headers.
  • [EXTERNAL_DOWNLOADS]: Fetches the Catlass library from its official repository at https://gitcode.com/cann/catlass.git if dependencies are missing from the local workspace.
  • [PROMPT_INJECTION]: Vulnerable to indirect prompt injection via external 'Design Documents' used as the sole source of truth for code generation. Ingestion points: SKILL.md (Design doc parsing). Boundary markers: Absent. Capability inventory: File creation, command execution, and compilation. Sanitization: Absent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 03:04 AM
Security Audit — agent-trust-hub — external-gitcode-ascend-catlass-operator-code-gen