wb-xhs-low-follower-pattern
Warn
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The 'Runtime bootstrap and update gate' in SKILL.md directs the agent to 'automatically install or update' missing or outdated dependencies before proceeding, enabling dynamic and unverifiable code execution.\n- [EXTERNAL_DOWNLOADS]: SKILL.md mandates the acquisition and updating of external software components based on an external policy file ('../RUNTIME_UPDATE_POLICY.md'), creating an external code dependency.\n- [COMMAND_EXECUTION]: The instructions in SKILL.md describe an operational environment that includes 'external program, browser automation, package, API client, or local script', all of which imply the execution of shell commands.\n- [PROMPT_INJECTION]: The skill performs ingestion of external data. 1. Ingestion points: Xiaohongshu post structures and content (SKILL.md Step 4). 2. Boundary markers: None specified. 3. Capability inventory: Use of browser automation and external scripts (SKILL.md bootstrap). 4. Sanitization: No sanitization or filtering of external content is described.
Audit Metadata