laohan-bianpai
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from various local files to determine the workflow status and suggest the next agent action, creating a surface for indirect instructions.
- Ingestion points:
scripts/bianpai.mjsreads multiple files includingepisode-config.json,00-选题.json, and02-创作工作稿/创作决策.json. - Boundary markers: Absent in the output provided to the agent.
- Capability inventory: The skill can execute shell and Node.js scripts via
spawnSync. - Sanitization: The script implements path validation using
realpathSyncand performs sha256 hash checks and schema validation on ingested files. - [COMMAND_EXECUTION]: The orchestrator script executes several local workflow management scripts (e.g.,
check-episode-contract.sh,verify-vendor-preflight.mjs) usingchild_process.spawnSync. The paths for these scripts are derived from the workflow root directory provided by the user.
Audit Metadata