model-architecture-diagram
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides commands for users to download a ZIP archive from the author's GitHub repository. This archive is used to host a gallery of model architecture images for local inspection.
- Evidence:
SKILL.mdcontains instructions to usecurlandunzipon a release asset from theBBuf/AI-Infra-Auto-Driven-SKILLSrepository. - [OBFUSCATION]: Several URLs in
references/diagram-index.jsonuse standard URL percent-encoding to support Chinese characters in file paths. - Evidence: Encoded segments like
%E6%B7%B7%E5%85%83...inreferences/diagram-index.jsondecode to valid descriptive text related to the model names. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied model names and interpolates them into a shell command to run a resolution script.
- Ingestion points: User-provided
<model name>in theSKILL.mdworkflow section. - Boundary markers: None present in the shell command template, though the argument is double-quoted to prevent simple breakage.
- Capability inventory: Execution of
python3 skills/model-architecture-diagram/scripts/model_architecture_diagram.pyvia shell. - Sanitization: The resolution script implements a
normalizefunction using regexre.sub(r"[^a-z0-9.\-\u4e00-\u9fff]+", " ", text)which effectively strips potentially malicious shell metacharacters and control tokens before processing the input.
Audit Metadata