li
Warn
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell-based operations, including
pythonmodules (e.g.,ane_package.orchestration.programmes,ane_package.feedback),gitfor repository synchronization, andnpxfor managing skill installations.\n- [EXTERNAL_DOWNLOADS]: During the consolidation process, the skill runsnpx -y skills add gasserane/personal-skills. This command retrieves and installs executable skills from a remote repository at runtime.\n- [DATA_EXFILTRATION]: The skill is configured to performgit pushon a repository containing synthesized knowledge artifacts and system improvements, providing a mechanism for local data to be uploaded to an external platform.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from documents (PDF, DOCX, HTM) and Microsoft Forms, creating a potential surface for instructions embedded in those documents to influence the agent.\n - Ingestion points: Document library on OneDrive, local wiki
raw/folders, and external MS Forms submissions.\n - Boundary markers: None provided; ingested content is not wrapped in protective delimiters.\n
- Capability inventory: Subprocess execution (Python, Git, NPX), file system modifications, and network-based DOI verification.\n
- Sanitization: Lacks general filtering or sanitization of ingested text to remove potentially malicious instructions.\n- [DYNAMIC_EXECUTION]: Uses
python -cto execute code strings and interacts with a local Python package (ane_package) for core functionality, including orchestration and feedback processing.
Audit Metadata