Skills
Navigate
skills/jobo16/ielts-buddy/ielts-mock-review/Gen Agent Trust Hub

ielts-mock-review

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local script scripts/ielts_buddy_api.py to perform actions such as account binding and fetching exam capabilities.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with an external API service at https://work.ieltsbuddy.igopx.cn/api/v1/agent to retrieve educational data.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the IELTS Buddy API into the agent context, which presents a potential surface for indirect instructions.
  • Ingestion points: API responses from ielts_mock_search_papers and ielts_mock_recent_activity described in SKILL.md.
  • Boundary markers: references/setup.md specifies that the API return is the authoritative business result and warns against hallucinating data.
  • Capability inventory: Execution of local Python scripts for API calls and status checks.
  • Sanitization: No explicit data sanitization or filtering logic is provided in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 06:39 AM