byted-viking-developer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs incremental synchronization of documentation and resource files from the vendor's cloud storage at
http://viking-skills.tos-cn-beijing.volces.com/viking-developer. The destination domain is part of the vendor's official cloud infrastructure. - [COMMAND_EXECUTION]: Instructions direct the agent to execute a local Python script
scripts/upgrade.pyto synchronize its reference materials before processing user requests. - [INDIRECT_PROMPT_INJECTION]: The skill relies on external content downloaded into the
resources/directory to guide its responses, creating a surface where documentation content could influence agent behavior. - Ingestion points: Documentation files (e.g.,
resources/index.md) and metadata synchronized by theupgrade.pyscript. - Boundary markers: The instructions explicitly收敛 (converge) all guidance into
resources/index.mdand require the agent to prioritize these materials. - Capability inventory: The skill possesses capabilities for network downloads (
urllib.request) and local file system writes within the skill directory. - Sanitization: The synchronization script implements path validation to prevent directory traversal attacks, ensuring all downloaded files remain within the designated
resources/folder.
Audit Metadata