li-stats
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external markdown files and uses it to perform file system operations without explicit data boundaries.
- Ingestion points: YAML frontmatter within markdown files located in
01-内容生产/待发布的内容/中短视频/. - Boundary markers: Absent; the skill does not provide instructions to the agent to disregard potential commands or instructions embedded within the YAML fields of processed files.
- Capability inventory: The skill possesses the ability to read local files, modify existing markdown documents (
数据统计表.md,00-选题记录.md), move files to an archive directory, and delete files within the待深化的选题directory. - Sanitization: Absent; there is no mention of validation or sanitization for the extracted YAML values before they are used to update records or determine file deletion targets.
Audit Metadata