gaokao-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local command-line tool
gaokao-clito perform data lookups. The instructions specify that the tool must be pre-installed at~/.local/bin/gaokao-cli. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external examination data, rankings, and university information from the
gaokao.cnplatform. - Ingestion points: Data returned from shell commands is parsed and interpreted by the agent (SKILL.md).
- Boundary markers: The skill does not define specific boundary markers for the data returned by the CLI tool.
- Capability inventory: The skill's capabilities are focused on executing the
gaokao-cliutility to read public data. - Sanitization: The skill leverages the structured JSON output format of the CLI tool to ensure data is handled correctly.
Audit Metadata