xia
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a research-oriented tool that guides the agent to perform repository mapping and evidence gathering before writing code. Analysis found no malicious patterns, unauthorized data exfiltration, or obfuscation.
- [PROMPT_INJECTION]: The skill involves reading and synthesizing information from untrusted local files (such as
README.md, manifests, and source code), which is a common surface for indirect prompt injection. However, the skill includes explicit mitigation strategies by requiring findings to be labeled by source (Local,Upstream,Docs,Inference) and using a structured template to separate evidence from agent reasoning. This significantly reduces the risk of the agent being misled by instructions embedded in the analyzed code. - [COMMAND_EXECUTION]: The protocol suggests verifying installed binary versions (e.g.,
python --version) to confirm runtime environment details. This is a standard development task used for stack detection and does not represent a security risk in this context.
Audit Metadata