skills/ascend-ai-coding/awesome-ascend-skills/external-mindstudio-cluster-fast-slow-rank-detector/Gen Agent Trust Hub
external-mindstudio-cluster-fast-slow-rank-detector
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes cluster performance data which could be manipulated to include malicious instructions.
- Ingestion points: The scripts
scripts/compare_api_stats.pyandscripts/compare_op_stats.pyread data from user-provided cluster directories via thescripts/rank_data_finder.pyutility. - Boundary markers: Absent; there are no delimiters or instructions provided to the agent to disregard instructions that might be embedded within the performance data files.
- Capability inventory: The skill is designed to run local Python scripts for data analysis and does not have network access or write permissions to sensitive system files.
- Sanitization: No specific sanitization or filtering is performed on the data content before it is processed and presented to the agent context.
- [PROMPT_INJECTION]: The skill metadata contains an anomalous synchronization date ('2026-04-18') that is inconsistent with current real-world timelines, representing a form of metadata anomaly.
- [COMMAND_EXECUTION]: The skill requires the agent to execute internal Python scripts (
compare_op_stats.py,compare_api_stats.py) through the terminal to perform its profiling functions. These scripts are bundled with the skill and do not invoke external network resources.
Audit Metadata