zj-tech-research-report
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
scripts/publish_report.pyscript dynamically loads a shared research runtime by appending a computed directory tosys.path. The path is resolved based on a sibling directory structure or a user-defined environment variableZJ_RESEARCH_RUNTIME. - [COMMAND_EXECUTION]: The
tests/verify_technical_report.pyscript employssubprocess.runto execute the publisher and validator scripts during its testing routine to ensure the quality gate functions correctly. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON input from external files to generate reports, creating a potential surface for indirect injection. * Ingestion points:
scripts/publish_report.pyloadsreport_ir,ledger, andbriefJSON objects from file paths provided as arguments. * Boundary markers: The system enforces a structured data contract via JSON schemas, though explicit prompt-level delimiters are not detailed in the script logic. * Capability inventory: The publisher script can create directories and write Markdown, HTML, and JSON receipt files. The test script can execute shell commands. * Sanitization:scripts/validate_technical_report.pyimplements a rigorous validation suite that checks schemas, fingerprints, and cross-references between the input objects before any processing occurs.
Audit Metadata