ielts-buddy-skills-updater
Warn
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
manifest.jsonfile defines distribution endpoints (latestUrlanddownloadUrl) targetingieltsbuddy-content.oss-cn-hangzhou.aliyuncs.com. The skill fetches a JSON manifest and a ZIP archive from this external source during the update process. - [REMOTE_CODE_EXECUTION]: The skill instructions in
SKILL.mddescribe a process where the commandpython3 scripts/update_skills.py updatedownloads a remote ZIP package and replaces local skill files. This self-update mechanism allows for the introduction and execution of new code from a remote server into the local environment. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through the
update_skills.pyscript. The instructions explicitly direct the agent to run these scripts to modify the local filesystem. - [INDIRECT_PROMPT_INJECTION]: By design, the skill ingests data from a remote source (JSON manifest and ZIP contents) to determine its own updates. This ingestion surface lacks visible sanitization or boundary markers in the provided files, creating a potential vector for indirect injection if the remote server or content is compromised.
Audit Metadata