cnki-download

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs standard web automation tasks to download academic papers from a known educational platform. All browser scripts are confined to checking element visibility, login status, and simulating clicks on download links.
  • [COMMAND_EXECUTION]: The skill utilizes evaluate_script to execute JavaScript within the browser context. This is an expected behavior for web-based AI skills and is used here for non-malicious tasks such as status verification and UI interaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the webpage (specifically the paper title). However, this data is only used for reporting purposes and does not flow into any high-risk tools or commands, maintaining a safe execution profile.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:49 PM